Promote for S3 Demo

Splunk-side

AWS Account ID
889918306825
Region
us-east-1
CSV File S3 URI
s3://logs-collected-depot-889918306825-us-east-1/firewall_logs_demo.csv
Promote Connection Role ARN
arn:aws:iam::889918306825:role/SplunkUCF-DMPromoteConnection
Promote Proxy Role ARN
arn:aws:iam::262326168930:role/SplunkUCF-Proxy

AWS-side

Automatic

Enter Splunk Cloud details to fetch inputs automatically.

Inputs

Resulting Policy

{
  "Effect": "Allow",
  "Principal": {
    "AWS": "arn:aws:iam::262326168930:role/SplunkUCF-Proxy"
  },
  "Action": "sts:AssumeRole",
  "Condition": {
    "StringEquals": {
      "sts:ExternalId": "{external_id}"
    }
  }
}