How can we Help?

Hybrid Spaces

Follow

Configuring Custom Storage for an AWS S3 Bucket 

 

The following instructions will assist the application administrator in configuring a Hybrid Spaces Talkdesk’s custom storage solution for Amazon Web Service (AWS).

For additional help, please contact support@talkdesk.com.

Note:  Existing recordings will not be copied to the new custom storage bucket but will remain accessible in the Talkdesk bucket. All workflows and logic tied to your recordings (access permissions, deletion policy) still applies for custom storage and will remain the same as stated in your Talkdesk account retention policy. 

 

Part 1: Set up your S3 bucket

1. Navigate and log in to console.aws.amazon.com

2. Click on Services [1] and search for or select S3 [2] under Storage:

AWS-Services-S3.png

3. Click Create Bucket [3].

4. Name the bucket (no spaces) and select the appropriate region [4].

5. Click Create [5]:

AWS-Create_bucket.png

 

Note: For additional security, you can further protect your data by enabling default encryption on a bucket so that all objects are encrypted when they are stored in the bucket. Learn how to Enable Default Encryption for an S3 Bucket in AWS.

You can also integrate it with CloudTrail, a service that captures specific API calls made to Amazon S3 from your AWS account and delivers the log files to an Amazon S3 bucket that you specify. Learn how to Create a Trail in AWS.

 

 

Part 2: Set up a custom policy

1. Click your login name on the top right of the screen and select My Security Credentials [6]:

AWS-MySecurityCredentials.png

  1. Click Policies [7].
  2. Click Create policy [8]:

AWS-Policies.png

4. Select the JSON tab [9] and copy and paste the following, replacing the BUCKETNAME with the name of your custom bucket [10]:

{

"Version": "2012-10-17",

"Statement": [{

"Effect": "Allow",

"Action": [

"s3:PutObject",

"s3:GetBucketLocation",

"s3:ListBucket",

"s3:DeleteObject",

"s3:GetObject"

],

"Resource": [

"arn:aws:s3:::BUCKETNAME",

"arn:aws:s3:::BUCKETNAME/*"

]

}]

}

AWS-Create_Policy_-_JSON.png

  1. Click the Review policy button [11].
  1. Review the policy using the following [12]:
  • “Policy Name” = Talkdesk-storage-policy.
  • “Description” = Policy used by Talkdesk to save recording files to the bucket.

AWS-Review_Policy.png

  1. Click the Create policy button [13].

  

Part 3: Begin configuration within Talkdesk

  1. In a new tab or window, navigate and log in to the Talkdesk (youraccountname.mytalkdesk.com).
  2. Select the Admin section [14].
  3. Click the Preferences tab [15].
  4. Scroll down until you see the setting "Data Storage Provider".
  5. Click Change provider [16]:

hybrid_spaces.png

A warning will be displayed to let you know pre-existing recordings from Talkdesk will become unavailable once you change to a custom storage. Hit Continue [17]:

Hybrid_spaces_1.png

6. Select Amazon AWS in "Storage Provider" [18].

7. Select the applicable Region [19].

8. Enter the applicable bucket name in Bucket [20]:

data_storage_provider__masked.png

9. Copy the 12-digit number found under “Amazon Account Resource Name” [21] and leave this page open for now.

 

Part 4: Set up a role in AWS

  1. Navigate back to AWS.
  2. Click Roles [22].
  3. Click Create role [23]:

AWS-Create_Role.png

4. Select the option Another AWS account [24].

5. Paste the 12-digit numerical string copied from the configuration dialog box in step [21] into the field "Account ID" [25]:

AWS-Role_Account_ID_modified.png

6. Tick the option “Require external ID” [26].  A new “External Account ID” field will be displayed.

7. Go back to the Talkdesk configuration box, copy the Account Id (as shown below) and paste it into the “External Account Id” field [27]:

data_storage_provider_masked.png

8. Click Next Permissions [28].

9. Search for and select the Talkdesk-storage-policy [29] and hit Next: Review [30]:

AWS-Role_Permissions.png

10. Type in the “Role name” = Talkdesk-storage-role [31].

11. Click Create role [32]:

AWS-Role-Review.png

12. Copy the new “Role ARN” that is displayed [33]:

AWS-Role-ARN_modified.png

 

Part 5: Complete configuration within Talkdesk

  1. Navigate back to the configuration dialog box within Talkdesk.
  2. Paste the "Role ARN" into the field “Amazon Account Resource Name” [34].
  3. Click Test connection [35]:

data_storage_provider_main_screen.png

4. Click OK on the successful installation prompt.

Note: Once you press Save and effectively change your storage provider to AWS, it is no longer possible to edit the provider, bucket, or any of the associated settings. If you need to revert this or change something, please contact support@talkdesk.com.

     5. Once ready, click Save.

You’re all set! The configuration is complete and effective immediately. All new recordings will be directed to your AWS S3 bucket. No additional steps or maintenance required.

 

Have more questions? Submit a request

Comments

Powered by Zendesk