Archive Pool requires a user managed Wasabi Hot Storage bucket to store the synchronized files. 


Supported in Plans:

  • CloudNAS Business
  • CloudNAS Enterprise


Note: If you do not have a Wasabi Hot Storage account, visit Signing Up for Wasabi to create an account.


In order to use Wasabi, you will need the following information from your Wasabi account:

  • Bucket Name
  • Access Key ID
  • Secret Access Key
     

Bucket Name

Specify a bucket to be used as the data object store. You can find the information about your buckets in the Wasabi console.

Note: If you do not have a bucket, please create a bucket by clicking on the "Create a Bucket" Wasabi console. For more information, please refer to the page Creating a Bucket.


Access Key ID

Obtain the Key ID from the user you want to use to access the Wasabi bucket. To find the Key ID:

  • Click Access Keys in the Wasabi menu on the left of  the screen. 
  • Choose the user you want use to connect to the Wasabi bucket
  • Find the Key ID in the Access Keys List.


If you do not have an Access Key ID, then you can generate a new Access Key ID and Secret Access Key.


Secret Access Key

If you do not have your access key or your access key is lost, then you cannot obtain the key from the system. You must generate a new Access Key ID and Secret Access Key pair. For more information on how to create a new key, please refer to the page Access Keys for Wasabi.


Policies

You must specify the following policy:


  • For the bucket:
    • s3:ListBucket
    • s3:GetBucketLocation
  • Put, get, delete object permission in the bucket.
    • s3:GetObject
    • s3:DeleteObject
    • s3:PutObject
    • s3:ListMultipartUploadParts
    • s3:AbortMultipartUpload
       
  • Get federal token permission (sts)
    • sts:*


To set the policy, go to the "Policies" in the Wasabi menu on the left of the screen.



Specify the following json code in the policy field.


You can copy and paste the code from below:


{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "s3:GetBucketLocation",
        "s3:ListBucket"
      ],
      "Resource": [
        "arn:aws:s3:::bucketname"
      ]
    },
    {
      "Effect": "Allow",
      "Action": [
        "s3:DeleteObject",
        "s3:GetObject",
        "s3:PutObject",
        "s3:AbortMultipartUpload",
        "s3:ListMultipartUploadParts"
      ],
      "Resource": [
        "arn:aws:s3:::bucketname/*"
      ]
    },
    {
      "Effect": "Allow",
      "Action": "sts:*",
      "Resource": "*"
    }
  ]
}


Update the values for "bucketName" to the name of the bucket in your Wasabi account.

You can attach user, group, role to this policy.


Regions

Admins do not need to provide the region in which their bucket is located. The Bucket Name, Key ID, and Application Key will automatically know in which reach the bucket is located.


Using Wasabi


Add Cloud Storage Panel



Complete the following steps to add the Cloud Storage Gateway

  1. Choose the storage type "Your Object Storage for Archive".
  2. Choose the Provider: Wasabi
  3. Enter a Name
  4. Enter the Wasabi account information        
    • Bucket Name
    • Key ID
    • Secret Key


Step 1. Choose your storage type

Choose the object store. To use Archive share, choose "Your Object Storage for Archive".


Step 2. Choose your provider

Choose the icon for Wasabi from the list of providers.


Step 3. Enter a Name

Choose a name for your Cloud Storage Group and enter it in the Name field. The name is used identify the cloud storage group in your system.


Step 4. Enter your Wasabi account information

Enter the Bucket Name, Key ID, and Secret Key for your account. The three pieces of information tells Morro Data which Wasabi bucket to use to store the files managed in this cloud storage group.


Click CREATE to complete the process.


Once the Cloud Storage Group is created, you can create pools and shares within that cloud storage group. For more information on creating pools and shares, reference the articles File System - Create Pool and Multi-Cloud Redundancy & File System - Create Shares.



Notes on Features

Account Permissions

If any changes to the permissions of the Wasabi account are made, an email will be sent the Morro account administrators. Changes to permissions may cause interruption in service.