topic Re: There is possible access S3 objects using R80 APIs, or this is exclusive for vSEC product? in API / CLI Discussion

There is possible access S3 objects using R80 APIs, or this is exclusive for vSEC product?

Elizabeth_Gil — Tue, 09 Jan 2018 16:26:31 GMT

I want to send archive backup files to a S3 Bucket, from my on-prem Mgmt Server R80.10 (Gaia/OpenServer) but the only documentation that I found so far is for vSEC for AWS.

Re: There is possible access S3 objects using R80 APIs, or this is exclusive for vSEC product?

Michael_Lawrenc — Thu, 11 Jan 2018 01:35:00 GMT

My GUESS is that, no you wouldn't be able to use the Check Point API to access your S3 bucket from outside your AWS infrastructure. S3 is an Amazon thing, not a Check Point thing. S3 access from the outside is going to require IAMs and all that good stuff - it really is (as I understand it) designed for storage of assets for use by other AWS assets (EC2 instances, EBS setups, etc.) that then serve things out via web interfaces. It's easy enough to post to an S3 bucket with web code, but that's not the case with a Check Point box. It's not a web server

Surely, there is a way to skin this cat, but I don't think it's going to be Check Point API. You'll probably need to write a script using an AWS SDK that knows how to talk to the AWS API and such. If anybody knows how to do that on a Check Point box, I am all ears.

Re: There is possible access S3 objects using R80 APIs, or this is exclusive for vSEC product?

PhoneBoy — Thu, 11 Jan 2018 04:55:27 GMT

vSEC doesn't directly interface with S3 at all.

That said, it's relatively easy to upload files to an S3 bucket using curl and a shell script similar to the following: Uploading to S3 in 18 lines of Shell (used to upload builds for http://soltrader.net) · GitHub

I personally haven't tested this, but can't think of reason why it wouldn't work.

Re: There is possible access S3 objects using R80 APIs, or this is exclusive for vSEC product?

Elizabeth_Gil — Thu, 11 Jan 2018 13:54:23 GMT

Thanks, Michael is what I'm going to do.

Re: There is possible access S3 objects using R80 APIs, or this is exclusive for vSEC product?

Elizabeth_Gil — Thu, 11 Jan 2018 13:57:15 GMT

Thanks, Dameon very useful information. I was thinking that I was going to need a specific Library or something. I will work with this script.