Skip to content

Commit 7d2c8b1

Browse files
committed
initial commit
1 parent 82e24b4 commit 7d2c8b1

File tree

1 file changed

+30
-0
lines changed

1 file changed

+30
-0
lines changed

src/connections/storage/data-lakes/data-lakes-manual-setup.md

Lines changed: 30 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -66,6 +66,8 @@ The following steps provide examples of the IAM Role and IAM Policy.
6666

6767
### IAM Role
6868

69+
###### 1. For `us-west-2` region:
70+
6971
Create a `segment-data-lake-role` role for Segment to assume. Attach the following trust relationship document to the role:
7072

7173
```json
@@ -94,6 +96,34 @@ Create a `segment-data-lake-role` role for Segment to assume. Attach the followi
9496
]
9597
}
9698
```
99+
###### 2. For other regions:
100+
101+
Create a `segment-data-lake-role` role for Segment to assume. Attach the following trust relationship document to the role:
102+
103+
```json
104+
{
105+
"Version": "2012-10-17",
106+
"Statement": [
107+
{
108+
"Sid": "",
109+
"Effect": "Allow",
110+
"Principal": {
111+
"AWS": [
112+
"arn:aws:iam::595280932656:role/segment-datalakes-production-access",
113+
]
114+
},
115+
"Action": "sts:AssumeRole",
116+
"Condition": {
117+
"StringEquals": {
118+
"sts:ExternalId": [
119+
"WORKSPACE_ID"
120+
]
121+
}
122+
}
123+
}
124+
]
125+
}
126+
```
97127

98128
> note ""
99129
> **NOTE:** Replace the `ExternalID` list with the Segment `WorkspaceID` that contains the sources to sync to the Data Lake.

0 commit comments

Comments
 (0)