Configure cloud import and export accounts

You can configure a cloud account that is used for any or all of the following purposes:

You need to configure Adobe Analytics with the necessary information to access your cloud account. This process consists of adding and configuring the account (such as Amazon S3 Role ARN, Google Cloud Platform, and so forth) as described in this article, and then adding and configuring the location within that account (such as a folder within the account) as described in Configure cloud import and export locations.

To configure a cloud import or export account:

  1. In Adobe Analytics, select Components > Locations.

  2. On the Locations page, select the Location accounts tab.

  3. To create a new account, select Add account.

    The Add account dialog displays.

    Or

    To edit an existing account, select View details on the tile that lists the account that you want to edit.
    The Location dialog displays.

    The Location account details dialog displays

  4. Specify the following information:

    table 0-row-2 1-row-2 2-row-2 3-row-2
    Field Function
    Location account name The name of the location account. This name appears when creating a location
    Location account description Provide a short description of the account to help differentiate it from other accounts of the same account type.
    Account type Select your cloud account type. We recommend having a single account for each account type, with multiple locations as needed within that account.
  5. In the Account properties section, specify information specific to the account type that you selected.

    For configuration instructions, expand the section below that corresponds to the Account type that you selected. (Additional legacy account types are also available, but are not recommended.)

    Account types

    accordion
    Amazon S3 Role ARN

    To configure an Amazon S3 Role ARN account, specify the following information:

    table 0-row-2 1-row-2 layout-auto
    Field Function
    Role ARN You must provide a Role ARN (Amazon Resource Name) that Adobe can use to gain access to the Amazon S3 account. To do this, you create an IAM permission policy for the source account, attach the policy to a user, and then create a role for the destination account. For specific information, see this AWS documentation.
    accordion
    Google Cloud Platform

    To configure a Google Cloud Platform account, specify the following information:

    table 0-row-2 1-row-2 layout-auto
    Field Function
    Project ID Your Google Cloud project ID. See the Google Cloud documentation about getting a project ID.
    accordion
    Azure SAS

    To configure an Azure SAS account, specify the following information:

    table 0-row-2 1-row-2 2-row-2 3-row-2 4-row-2 5-row-2 layout-auto
    Field Function
    Application ID Copy this ID from the Azure application that you created. In Microsoft Azure, this information is located on the Overview tab within your application. For more information, see the Microsoft Azure documentation about how to register an application with the Microsoft identity platform.
    Tenant ID Copy this ID from the Azure application that you created. In Microsoft Azure, this information is located on the Overview tab within your application. For more information, see the Microsoft Azure documentation about how to register an application with the Microsoft identity platform.
    Key vault URI

    The path to the SAS token in Azure Key Vault. To configure Azure SAS, you must store an SAS token as a secret using Azure Key Vault. For information, see the Microsoft Azure documentation about how to set and retrieve a secret from Azure Key Vault.

    After the key vault URI is created, add an access policy on the Key Vault to grant permission to the Azure application that you created. For information, see the Microsoft Azure documentation about how to assign a Key Vault access policy.

    Key vault secret name The secret name that you created when adding the secret to Azure Key Vault. In Microsoft Azure, this information is located in the Key Vault you created, on the Key Vault settings page. For information, see the Microsoft Azure documentation about how to set and retrieve a secret from Azure Key Vault.
    Location account secret Copy the secret from the Azure application that you created. In Microsoft Azure, this information is located on the Certificates & secrets tab within your application. For more information, see the Microsoft Azure documentation about how to register an application with the Microsoft identity platform.
    accordion
    Azure RBAC

    To configure an Azure RBAC account, specify the following information:

    table 0-row-2 1-row-2 2-row-2 3-row-2 layout-auto
    Field Function
    Application ID Copy this ID from the Azure application that you created. In Microsoft Azure, this information is located on the Overview tab within your application. For more information, see the Microsoft Azure documentation about how to register an application with the Microsoft identity platform.
    Tenant ID Copy this ID from the Azure application that you created. In Microsoft Azure, this information is located on the Overview tab within your application. For more information, see the Microsoft Azure documentation about how to register an application with the Microsoft identity platform.
    Location account secret Copy the secret from the Azure application that you created. In Microsoft Azure, this information is located on the Certificates & secrets tab within your application. For more information, see the Microsoft Azure documentation about how to register an application with the Microsoft identity platform.

    Legacy account types

    These legacy account types are available only when exporting data with Data Feeds and Data Warehouse. These options are not available when importing data with Classification sets.

    accordion
    FTP

    Data feed data can be delivered to an Adobe or customer-hosted FTP location. Requires an FTP host, username, and password. Use the path field to place feed files in a folder. Folders must already exist; feeds throw an error if the specified path does not exist.

    table 0-row-2 1-row-2 2-row-2 3-row-2 4-row-2 layout-auto
    Field Function
    Host Enter the desired FTP destination URL. For example, ftp://ftp.omniture.com.
    Path Can be left blank.
    Username Enter the username to log in to the FTP site.
    Password and confirm password Enter the password to log in to the FTP site.
    accordion
    SFTP
    SFTP support for data feeds is available. Requires an SFTP host, username, and the destination site to contain a valid RSA or DSA public key. You can download the appropriate public key when creating the feed.
    accordion
    S3

    You can send warehouse data directly to Amazon S3 buckets. This destination type requires a Bucket name, an Access Key ID, and a Secret Key. See Amazon S3 bucket naming requirements within the Amazon S3 docs for more information.

    The user you provide for uploading data warehouse data must have the following permissions:

    • s3:GetObject
    • s3:PutObject
    • s3:PutObjectAcl

    The following 16 standard AWS regions are supported (using the appropriate signature algorithm where necessary):

    • us-east-2
    • us-east-1
    • us-west-1
    • us-west-2
    • ap-south-1
    • ap-northeast-2
    • ap-southeast-1
    • ap-southeast-2
    • ap-northeast-1
    • ca-central-1
    • eu-central-1
    • eu-west-1
    • eu-west-2
    • eu-west-3
    • eu-north-1
    • sa-east-1
    note note
    NOTE
    The cn-north-1 region is not supported.
    accordion
    Azure Blob

    Data warehouse supports Azure Blob destinations. Requires a container, account, and a key. Amazon automatically encrypts the data at rest. When you download the data, it gets decrypted automatically. See Create a storage account within the Microsoft Azure docs for more information.

    note note
    NOTE
    You must implement your own process to manage disk space on the data warehouse destination. Adobe does not delete any data from the server.
  6. Select Save.

  7. Continue with Configure cloud import and export locations.

recommendation-more-help
46b8682c-fda6-4669-9355-1a44923e549e