Amazon S3 Access

Amazon Simple Storage Service (S3) is a cloud storage service The Trade Desk uses to store and share data securely for reporting and analytics. With S3, you can integrate data feeds into your own data pipelines. To download log files or reports, follow these steps to create and manage the AWS access ID and secret key pair required to generate an AWS signature for authentication.

TIP: Wait until The Trade Desk sets up your account before proceeding with the next steps. After you confirm the email accessing Amazon S3, The Trade Desk will grant you file path access. You will then receive a welcome email from The Trade Desk to activate your account, after which you can create credentials for both The Trade Desk and AWS.

To access your Amazon S3 bucket created by The Trade Desk, make sure you have the following required items:

The Trade Desk account for logging in to OpenTTD.
AWS security credentials: an access key ID and a secret key. You can generate both keys at the same time with the interactive UI.

Generate AWS keys

The process for generating AWS keys is similar to creating API tokens. The primary difference is that you select a different application for AWS.

Here's what you need to know about generating AWS access keys:

IMPORTANT: Be sure to save your generated AWS secret key to your secrets management system. You cannot look it up later or regenerate the same secret key. If you do not save your secret key, you must generate a new one.

To generate AWS access keys, complete the following steps:

  1. Log in with your The Trade Desk account credentials.
  2. Navigate directly to the OpenTTD Access Management app.
  3. Click Generate Token / Key. The Generate API Token / Keys dialog appears.
  4. In the Application field, select Data Feeds if it is not selected by default. If this option is unavailable, contact your Technical Account Manager.
  5. Select the lifetime based on your key rotation strategy and integration needs.
  6. Click Save. A confirmation message appears with your AWS access keys.
  7. Copy the displayed AWS access key ID and secret key, save them to your secrets management system for future reference, and then close the message.
  8. Use these keys to authenticate with Amazon AWS API for S3. For details, see Authenticating Requests (AWS Signature Version 4).

Check your AWS key information

To view your access key ID and check the creation and expiration dates of your generated AWS access keys, complete the following steps:

  1. Log in with your The Trade Desk account credentials.
  2. Navigate directly to the OpenTTD Access Management app.
  3. In the Provider column, search for AWS.

Your access key IDs appear in the Token Name / Access Keys column.

TIP: To update a key, you must revoke it, generate a new key, and then replace the previous keys in your integration.

Revoke AWS access keys

If your AWS access keys have been compromised, are no longer needed, or you want to replace it with new keys with a longer or shorter lifetime, you can revoke the keys at any time.

NOTE: If you revoke a key, you revoke both your access key ID and secret key. You cannot revoke only one type of key.

To revoke AWS access keys, complete the following steps:

  1. Log in with your The Trade Desk account credentials.
  2. Navigate directly to the OpenTTD Access Management app.
  3. In the Provider column, search for AWS.
  4. Find the row with the access key ID you want to revoke, then in the Actions column on the far right, click Revoke. A confirmation message appears.
  5. Verify that you've selected the correct key and click Continue.
  6. Update the integration where the keys were used as needed (for example, by generating new keys and replacing the old ones in the integration).

FAQs

The following are the most commonly asked questions about generating AWS access keys.

What's the maximum lifetime of an access key?

When using Amazon S3, AWS access keys and secret credentials expire after a maximum of 180 days.

I’ve never used Amazon S3 before. How do I access it after generating my AWS access keys?

Several third-party applications can connect to Amazon S3. The Trade Desk recommends AWS Toolkit for Visual Studio Code. For help, contact your Data Partnerships Manager.

Can I create more than one set of access keys?

If you are using REDS, yes. However, you can have only two sets of keys (access key and secret key) at a time.