Amazon CloudFront Setup Guide

Follow our setup guide to connect Amazon CloudFront to Fivetran.

Prerequisites

To connect Amazon CloudFront to Fivetran, you need:

An S3 bucket containing files with supported file types and encodings
An AWS account with the ability to grant Fivetran permission to read from the bucket

Setup instructions

Configure CloudFront logging

If you haven't already, configure CloudFront to store its log files in an S3 bucket according to Amazon's instructions.

Find External ID

In the connector setup form, find the automatically-generated External ID and make a note of it. You will need it to create an IAM role in AWS.

NOTE: The automatically-generated External ID is tied to your account. If you close and re-open the setup form, the ID will remain the same. You may wish to keep the tab open in the background while you configure your source for convenience, but closing it is also OK.

Create IAM policy

This step will allow Fivetran to access your S3 bucket.

Open your Amazon IAM console.
Go to Policies, then select Create policy.
Go to the JSON tab.

Copy the following policy and paste it in the JSON tab, replacing {your-bucket-name} with the name of the S3 bucket where you store CloudFront logs.

{
"Version": "2012-10-17",
"Statement": [
    {
      "Effect": "Allow",
      "Action": [
"s3:Get*",
"s3:List*"
      ],
      "Resource": "arn:aws:s3:::{your-bucket-name}/*"
    },
    {
      "Effect": "Allow",
      "Action": [
"s3:Get*",
"s3:List*"
      ],
      "Resource": "arn:aws:s3:::{your-bucket-name}"
    }
  ]
}

Click Review policy.
Name the policy "Fivetran-cloudfront-access".
Click Create policy.

Create IAM role

Go to Roles, then select Create role.
Select Another AWS account, then enter Fivetran's account ID, 834469178297, in the Account ID field. Select the Require external ID checkbox.
Enter the External ID you found in Step 2.
Click Next: Permissions.
Select the "Fivetran-cloudfront-access" policy that you created in Step 3.
Click Next: Tags, which is optional.
Click Next: Review.
Name your new role "Fivetran".
Click Create role.
Select the Fivetran role you just created.
Find the Role ARN and make a note of it. You will need it to configure Fivetran.

(Optional) Set permissions

You can specify permissions for the Role ARN that you designate for Fivetran. Giving selective permissions to this role will allow Fivetran to only sync what it has permissions to see.

Finish Fivetran configuration

In the connector setup form, enter your chosen Destination schema name.
Enter your S3 bucket.
Enter the Role ARN you found in Step 4.
(Optional) Enter your folder path.
Click Save & Test. Fivetran will take it from here and sync your CloudFront data from your AWS S3 bucket.

Connector Overview

API Connector Configuration

Documentation Home