How to Reset Access Key for Gainsight Managed S3 Buckets
This article provides information on how admins can reset the Access Key for Gainsight S3 Managed Buckets.
Update Access Key
Amazon S3 bucket is a database used to store CSV/TSV data files. When a connection to your S3 bucket is established from your Gainsight org, you can fetch data from these files into Gainsight objects, using Rules Engine, Data Designer, and Adoption Explorer.
To avoid security risks, Gainsight recommends updating the Access Key every 180 days.
IMPORTANT:
- Only super admins can view and manage S3 keys for both Gainsight-managed and customer-managed S3 buckets.
- Non-super admins, even if they have access to the connector’s page through permission bundles, can no longer view or rotate the S3 keys.
- Gainsight support teams can no longer have access to S3 keys, even when granted access through support channels. This further reduces the risk of unintended exposure to sensitive information.
- After resetting the credentials, you need to update all third-party systems that are either pushing data into this bucket or reading from it with the new credentials.
For more information on how to check all the rules and connectors reading from S3, refer to the Identify Rules and Connector Jobs Reading from S3 article.
Note: You can identify the source system based on the file name configured in the rules. Make sure any source systems that drop data into S3 (as identified by the rules) are updated with the new keys so that there is no interruption in data flows.
To update the Access key:
- Navigate to Administration > Connectors.
- Click View S3 Config. The S3 Configuration page appears.
- Click the Reset icon next to Access Key. Reset Access Key dialog appears.
- Click Proceed to reset.
IMPORTANT: After resetting the credentials, you need to update all third-party systems that are either pushing data into this bucket or reading from it with the new credentials.
For more information on how to check all the rules and connectors reading from S3, refer to the Identify Rules and Connector Jobs Reading from S3 article.
Note: You can identify the source system based on the file name configured in the rules. Make sure any source systems that drop data into S3 (as identified by the rules) are updated with the new keys so that there is no interruption in data flows.