S3 Bucket Setup Guide

Last updated: July 1, 2026

Prerequisites

  1. Knowledge of and access to your company’s AWS account.

  2. The ability to provision an S3 bucket and configure permissions.

  3. Approval for S3 automated report delivery by Astra.

Steps to implement

  1. Create an S3 bucket and share the ARN with Astra.  This is the bucket where you’ll receive reports.

  2. Astra will create an AWS role (AstraRoleARN) and share the ARN with you.

    1. The AstraRoleARN will need the following permissions within your AWS account to access the S3 bucket where you would like to receive the reports (add to bucket policy):

      {
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "AstraReportDelivery",
      "Effect": "Allow",
      "Principal": {
        "AWS": "AstraRoleARN"
      },
      "Action": [
        "s3:PutObject",
        "s3:AbortMultipartUpload",
        "s3:ListMultipartUploadParts"
      ],
      "Resource": [
        "arn:aws:s3:::customer-example-bucket-name"
        "arn:aws:s3:::customer-example-bucket-name/*"
      ]
    }
  ]
}

    2. If your bucket uses KMS encryption, you will also need to grant the AstraRoleARN access in your KMS key policy (please also share your KMS ARN with Astra):

{
  "Sid": "AllowAstraKMSAccess",
  "Effect": "Allow",
  "Principal": {
    "AWS": "AstraRoleARN"
  },
  "Action": [
    "kms:GenerateDataKey",
    "kms:Decrypt"
  ],
  "Resource": "*"
}

  1. Astra sends a test file to your S3 bucket.

  2. Confirm that you received the test file.

  3. Setup is complete. Astra now delivers your reports automatically.

FAQ

Q: What are my options for automated report delivery to another cloud provider?

A: Astra presently supports delivery to AWS S3 buckets.

Q: Can I request a custom report be delivered with specific data?

A: Astra can generate custom reports for automated delivery on an approval basis, provided that the data requested is readily available.

Q: What is the turnaround time for a custom report request?

A: Typical turnaround time for a custom report request is 2 weeks, provided that the data requested is readily available.