Exporting your data with the console

Open the Amazon S3 console.

Choose Create bucket.

Name your bucket and select an appropriate region. Then, at the bottom of the page, choose Create bucket.

It must also be the same region in which you are using the Amazon Monitron service.

Review the rest of the options on the page, and make the appropriate choices, depending on your security needs and policies.

Using the search box, find the bucket you just created, and then choose it.

From the Properties tab, make a note of the name, ARN, and region of the bucket.

Open the IAM console and choose Policies.

Choose Create policy.

Select the JSON tab.

Delete the default JSON text so that the form is empty.

Paste in the bucket access policy.

{
    "Statement": [
        {
            "Action": [
                "s3:GetBucketAcl",
                "s3:GetBucketLocation",
                "s3:ListBucket"
            ],
            "Effect": "Allow",
            "Resource": [
                "arn:aws:s3:::bucketname"
            ]
        },
        {
            "Action": [
                "s3:PutObject",
                "s3:GetBucketAcl"
            ],
            "Effect": "Allow",
            "Resource": [
                "arn:aws:s3:::bucketname/*"
            ]
        }
    ],
    "Version": "2012-10-17"
}

Select Next.

On the Review and create page, do the following:

1. In Policy details, enter a Policy name and optional Description.

2. Leave the Permissions defined in this policy section as is.

3. In Add tags — optional, you can choose to add tags to keep track of your resources..

4. Choose Create policy.

   

Open the IAM console and choose Roles.

Choose Create role.

On the Select trusted entity, in Trusted entity type, choose AWS account.

In An AWS account, choose This account. You can customize additional setting using Options.

Choose Next.

In Add permissions, for Permissions policies, search for the policy you just created in the search box, and select your policy.

On the Name, review, and create page do the following:

1. In Role details enter a Role name and optional Description.

2. You can choose to ignore Step 1: Select trusted entities and Step 2: Add permisions.

3. For Step 3: Add tags, for Add tags — optional, add optional tags to keep track of your resources.

Choose Create role.

Search for the role you just created and choose the role.

Select the Trust relationships tab.

Choose Edit trust relationship.

Erase the default JSON text so that the form is empty.

Paste in the policy that allows Amazon Monitron to assume the role.

{
	"Version": "2012-10-17",
	"Statement": [{
		"Effect": "Allow",
		"Principal": {
			"Service": ["monitron.amazonaws.com"]
		},
		"Action": "sts:AssumeRole"
	}]
}

Choose Update Trust Policy.

From your AWS console, choose the question mark icon near the upper right corner of any page, then choose Support Center.

On the next page, choose Create case.

On the How can we help? page, do the following:

1. Choose Account and billing support.

2. Under Service, choose Account.

3. Under Category, choose Compliance & Accreditations.

4. Choose Severity, if that option is available to you based on your support subscription.

5. Choose Next step: Additional information.

   

In Additional information do the following:

1. Under Subject, enter Amazon Monitron data export request.

2. In the Description field, enter:

   1. your account ID

   2. the region of the bucket you created

   3. the ARN of the bucket you created (for example: "arn:aws:s3:::bucketname")

   4. the ARN of the role you created (for example: "arn:aws:iam::273771705212:role/role-for-monitron")

   

3. Choose Next step: Solve now or contact us.

In Solve now or contact us do the following:

1. In Solve now, select Next.

   

2. In Contact us, choose your Preferred contact language and preferred method of contact.

3. Choose Submit. A confirmation screen with your case ID and details will be displayed.