Skip to main content
Sign Out

Welcome to Dell

My Account
  • Place orders quickly and easily
  • View orders and track your shipping status
  • Create and access a list of your products
  • Manage your Dell EMC sites, products, and product-level contacts using Company Administration.
Sign In Create an Account Premier Sign In Partner Program Sign In
Contact Us

Dell ObjectScale 1.3 Administration Guide

PDF

Complete approved S3 requests on protected accounts

An IAM user completes an approved S3 request.

Prerequisites

  • The request must have a status of Approved.
  • You must be the IAM user whose user id was entered in the request.

Steps

To complete S3 actions, the IAM user must do the following:
  1. Get the PAA requestID. One way is to copy it from the Request screen in the ObjectScale Portal user interface. There are also APIs that list requests.
  2. Get the PAA approval token associated with the PAA requestID. Use the using the getFederationToken API . Then use the token to perform S3 requests using the S3 client API.
    Example request using the AWS CLI to get a PAA token for an S3 action: 
    aws sts get-federation-token --name PAA_REQUEST_SESSION --endpoint-url=https://$OSC_GATEWAY_ENDPOINT/sts \  
    --tags Key=OSCPAARequestId,Value=$PAA_REQUEST_ID
  3. Use the token with the appropriate S3 request to perform the approved action.
    Example request for completing an S3 PutObjectRetention request: 
    export AWS_ACCESS_KEY_ID=$ACCESS_KEY_ID_IN_PAA_TEMPORARY_CRED
export AWS_SECRET_ACCESS_KEY=$SECRET_KEY_IN_PAA_TEMPORARY_CRED
export AWS_SESSION_TOKEN=$SESSION_TOKEN_IN_PAA_TEMPORARY_CRED
aws s3api put-object-retention \
    --bucket my-bucket-with-object-lock \
    --key object1\
    --retention '{ "Mode": "GOVERNANCE", "RetainUntilDate": "2024-01-01T00:00:00" }' \
     --bypass-governance-retention \
     --endpoint-url=$OBJECTSCALE_S3_ENDPOINT

Results

The request status changes to Completed in a best-effort manner. Sometimes, the status may not change to Completed even when the request runs successfully. In those cases, the status moves to the next life cycle status (Expired) after 7 days.

Rate this content

Accurate
Useful
Easy to understand
Was this article helpful?
0/3000 characters
  Please provide ratings (1-5 stars).
  Please provide ratings (1-5 stars).
  Please provide ratings (1-5 stars).
  Please select whether the article was helpful or not.
  Comments cannot contain these special characters: <>()\