Amazon Web Services (AWS) S3

To export data from Worklytics to Amazon Web Services (AWS) S3 buckets, you can set up a Data Export Connection in the Worklytics Web App selecting Amazon S3 as Data Destination.

How it works

Your organization, as tenant of the Worklytics platform, is assigned with a Google Cloud Platform (GCP) service account (SA) that will be used to export the data to your AWS S3 bucket via Workload Identity Federation.

Your tenant SA must be granted with the necessary permissions to access your AWS S3 bucket where the data will be exported.

Pre-requisites

1. Take note of your Worklytics' tenant Service Account Unique ID: you can find this value in the Export Data Configuration page of the Worklytics Web App, and also on the UI to create the data export itself.

2. Go to the Amazon Web Services Console and create a new bucket (or choose an existing one).

3. Create an AWS IAM role and allow your Worklytics' tenant SA to assume it, but configuring the role assumption policy.

4. Grant the role s3:PutObject, s3:GetObject, and s3:ListBucket permissions on the chosen bucket.

We also provide a Terraform module that will automatically provision these resources for you.

Setting up the connection

1. Go to the Data Export Connection section in the Worklytics Web App.

2. Select the dataset you want to export, and its frequency.

3. Select Amazon S3 as Data Destination, and provide the following values:

   • Enter the Bucket Name.

   • Enter the Role ARN: created in the pre-requisites. It's the role that your Worklytics' tenant SA will assume to access the bucket.

   • Enter the Region where the bucket is located.

4. Select the format and compression options, and click on "Create Export".