Export data to Amazon S3

Before starting the integration, make sure you have an active AWS account and permission to:

1. Create an Amazon S3 bucket.
2. Create an IAM role enabling Stripe to create objects in the provisioned bucket.
3. Access the Stripe Dashboard with an admin or developer role.

1. Navigate to your Amazon S3 console in your chosen account region.
2. If needed, create a new storage bucket.
   • If you don’t currently have an S3 bucket, follow the AWS guidelines for creating your first bucket. We recommend including “stripe” in the name, such as “<name>-stripe-data.”
3. Take note of this bucket name and the region because you’ll need them for future steps.

1. Visit the Data Pipeline Dashboard.
2. Click Get started.
3. Select the Amazon S3 logo and click Next.
4. On this permissions step, you see code blocks that you can use to create the IAM role and trust policy.

To create a new permission policy:

1. In your AWS IAM console, click Policies > Create policy > JSON.
2. Paste in the supplied JSON snippet from the Stripe onboarding step.
3. In the Resource section of the JSON snippet, replace BUCKET_RESOURCE with the bucket name you set.
4. Provide a name for the new policy (for example, stripe-data-pipeline-policy).

To create a new role using a custom policy:

1. In your AWS IAM console, click Roles > Create role > Custom Trust Policy.
2. Paste in the supplied JSON snippet from the Stripe onboarding step.
3. Click Next on the permissions page, then add the new role to your new policy.
4. Select the newly created policy name (for example, stripe-data-pipeline-policy).
5. Save the role with the following name: stripe-data-pipeline-s3-role. You must use this exact name.

1. Return to the Stripe Data Pipeline onboarding process.
2. Enter the AWS Account ID, bucket name and region generated in the previous step.
3. Select your data encryption option. If you chose to use a customer managed key, upload your public key. Check the step to generate encryptions keys to see how to create one.
4. Click Next. Clicking Next sends test data to the bucket you provided, but not production data.
5. When you confirm test data delivery, go to your S3 bucket.
6. Open the bucket, navigate to the penny_test directory, and open the acct_ prefixed sub-directory to locate the delivered account_validation.csv test file.
7. Download the account_validation.csv file.
8. Upload this test file in your data pipeline onboarding step.
9. Click Confirm value.
10. When you confirm the test value, click Subscribe. This subscribes you to the product and schedules the initial full load of data for delivery to your Amazon S3 bucket, a process that can take 6-12 hours.