Assuming an IAM Role via CloudBerry Explorer

CloudBerry Explorer enables users to authenticate to Amazon S3 using regular credentials. Taking things further, we've implemented support for IAM roles in the latest iteration of CloudBerry Explorer — release 5.0.5. In this article, we talk about how this mechanism functions and how to assume a role in Explorer.

Introduction

Amazon has an extremely versatile authentication mechanism. That is to say, apart from regular cloud credentials, Amazon allows to create the so-called IAM roles. An IAM role is similar to a user, in that it is an AWS identity with permission policies that determine what the identity can and cannot do in AWS. Here how a created role looks in the AWS Console:

Now let's see how you can assume the aforementioned role in CloudBerry Explorer. But before we begin, ensure that your CloudBerry Explorer is already authenticated to S3 using credentials of the user that's been assigned to the role you're trying to assume.

FREE WHITEPAPER
Mastering AWS IAM for Amazon S3
Learn how to effectively manage the security of your Amazon S3 account to protect your and your clients' data

Role assumption

Assuming a role in CloudBerry Explorer is no more complicated than adding a few strings in the settings file. You can navigate to the file by going to C:\Users\yourUserName\AppData\Local\CloudBerryLab\CloudBerry Explorer for Amazon S3 in Windows Explorer. Alternatively, you can locate the file via CloudBerry Explorer itself. Under Tools, click Diagnostic.

Click Open in Folder.

Open the settings.list file and add the following attributes to your S3 account (placed between <Settings> and </Settings>):

  • <AssumedRoleARN>arn:aws:iam::YourAccountNumber:role/RoleName</AssumedRoleARN>
  • <AssumedRoleExternalId>ExternalId</AssumedRoleExternalId>

The values for the attributes can be fetched from the AWS Console.

Having done so, save the file and relaunch CloudBerry Explorer. Upon launching your role should be automatically assumed, and the permissions will be set in accordance with your role.

Recent Posts

Top 10 Features in the MSP360 Platform You Didn’t Know Existed

Like any system, the MSP360 platform offers many features that are used every day to…

3 days ago

Unlock the Secrets of Compliance with MSP360: A Webinar for Modern MSPs and Businesses

Managing your data and ensuring compliance with the ever-evolving regulatory landscape is not just a…

7 days ago

Introducing MSP360 Managed Backup for Microsoft 365 and Google Workspace 4.0

We’re excited to introduce MSP360 Managed Backup for Microsoft 365 and Google Workspace 4.0 with…

2 weeks ago

MSP360 Managed Backup: Secure Data Protection for Microsoft 365 and Google Workspace

Join us for an in-depth exploration of how businesses can leverage MSP360's innovative backup solutions to secure their data…

3 weeks ago

Unlocking the Critical Value of Cloud Backup and Storage

In today's digital landscape, ensuring the security and accessibility of your data is paramount. Join…

1 month ago

Strengthening Client Partnerships: Three Strategies for MSPs to Enhance Client Retention

For managed service providers (MSPs), clients are much more than transactions. By approaching each client…

1 month ago