AWS Storage Gateway - Page 50

AWS Storage Gateway User Guide
Creating a File Share
Important
To create a file share, a file gateway requires you to activate AWS Security Token Service (AWS
STS). Make sure that AWS STS is activated in the AWS Region that you are creating your file
gateway in. If AWS STS is not activated in that AWS Region, activate it. For information about
how to activate AWS STS, see Activating and Deactivating AWS STS in an AWS Region in the IAM
User Guide.
Note
You can use AWS Key Management Service (AWS KMS) to encrypt objects that your file
gateway stores in Amazon S3. Currently, you can do this by using the Storage Gateway API. For
instructions, see the Storage Gateway API Reference.
By default, a file gateway uses server-side encryption managed with Amazon S3 (SSE-S3) when
it writes data to an Amazon S3 bucket. If you make SSE-KMS (server-side encryption with AWS
KMS–managed keys) the default encryption for your S3 bucket, objects that a file gateway
stores there are encrypted using SSE-S3.
To encrypt using SSE-KMS with your own AWS KMS key, you must enable SSE-KMS encryption.
When you do so, provide the Amazon Resource Name (ARN) of the KMS key when you
create your file share. You can also update KMS settings for your file share by using the
UpdateNFSFileShare or UpdateSMBFileShare API operation. This update applies to objects
stored in the Amazon S3 buckets after the update.
Topics
• Creating an NFS File Share (p. 43)
• Creating an SMB File Share (p. 45)
Creating an NFS File Share
Use the following procedure to create an NFS file share.
To create an NFS file share
1. Open the AWS Storage Gateway console at https://console.amazonaws.cn/storagegateway/home.
2. Choose Create file share.
3. For Amazon S3 bucket name, provide the name for the Amazon S3 bucket for your gateway to store
your files in and retrieve your files to. This name must be compliant with Domain Name Service
(DNS). This bucket must also exist already in S3; it isn't created for you by your file gateway. For
information on DNS-compliant names for buckets, see Rules for Bucket Naming in the Amazon
Simple Storage Service Developer Guide.
4. For Access objects using, choose Network File System(NFS).
5. For Gateway, choose your file gateway from the list and choose Next.
API Version 2013-06-30
43