Preparing Your AWS Account

This document will outline the necessary steps to prepare your AWS account for use with this sample application. Please refer to the repository README for further reading on preparing accounts and configuring the application.

This page will cover the following topics:

• Setting up an S3 bucket for Zoom Cloud Recordings
• Setting up an IAM policy that defines access to your Cloud Recording S3 bucket
• Setting up an IAM user with an Access Key ID and Secret Access Key, allowing programmatic access to AWS services

Setting up an S3 bucket for Zoom Cloud Recordings

In the AWS region of your choice, create a General purpose S3 bucket, naming it anything of your choosing. For this page, we'll use videosdk-cloud-recording-uploads as our S3 bucket name.

Once the bucket has been created, fetch the virtual-hosted-style path of the bucket. Using the bucket name above, videosdk-cloud-recording-uploads, our fully-qualified virtual host path would be:

https://videosdk-cloud-recording-uploads.s3.us-west-2.amazonaws.com

Make note of the bucket URL, as it will be used in the future when configuring the sample application.

Setting up an IAM policy for S3 bucket access

Under IAM > Policies > Create policy in the AWS console, create a new policy that will deny access to everything except s3:PutObject into the S3 bucket that was created previously. Using the S3 bucket name defined above, videosdk-cloud-recording-uploads, the policy JSON will look like:

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "UploadUserDenyEverything",
      "Effect": "Deny",
      "NotAction": "*",
      "Resource": "*"
    },
    {
      "Sid": "UploadUserAllowPutObject",
      "Effect": "Allow",
      "Action": [
        "s3:PutObject"
      ],
      "Resource": [
        "arn:aws:s3:::videosdk-cloud-recording-uploads/*"
      ]
    }
  ]
}

Tip

If you don't know the ARN of your S3 bucket, it can be fetched via the AWS Console by clicking on the bucket and navigating to the Properties tab, identifying the contents listed under "Amazon Resource Name (ARN)."

Setting up an IAM user with Access Key ID and Secret Access Key access

Under IAM > Users > Create user in the AWS console, create a new user that has the attached permission policy defined previously. When the user has been created, create an access key for the user, taking note of the Access Key ID and Secret Access Key, as those credentials will be used in this sample application to access AWS resources in a future section.

Wrapping Up

Before leaving this page, ensure you have the following pieces of information on a notepad for future configuration in this sample application.

• The fully-qualified URL of the S3 bucket that was created
• The Access Key ID and Secret Access Key of the IAM user that will upload Cloud Recordings