{"id":41579,"date":"2024-10-18T09:49:04","date_gmt":"2024-10-18T13:49:04","guid":{"rendered":"https:\/\/netfoundry.io\/?post_type=resources&#038;p=41579"},"modified":"2026-01-29T12:19:35","modified_gmt":"2026-01-29T17:19:35","slug":"solution-guide-securing-aws-zero-trust-access-to-s3-buckets-with-python-vpc-and-ziti-sdk","status":"publish","type":"resources","link":"https:\/\/netfoundry.io\/resources\/solution-guide-securing-aws-zero-trust-access-to-s3-buckets-with-python-vpc-and-ziti-sdk\/","title":{"rendered":"Solution Guide: Securing AWS Zero Trust Access to S3 Buckets with Python, VPC, and Ziti SDK"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-post\" data-elementor-id=\"41579\" class=\"elementor elementor-41579\" data-elementor-post-type=\"resources\">\n\t\t\t\t<main class=\"elementor-element elementor-element-b7dad45 e-con-full e-flex e-con e-parent\" data-id=\"b7dad45\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t<div class=\"elementor-element elementor-element-34a0920 e-grid e-con-boxed e-con e-child\" data-id=\"34a0920\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-1a068ac elementor-widget elementor-widget-global elementor-global-31993 elementor-widget-jet-breadcrumbs\" data-id=\"1a068ac\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"jet-breadcrumbs.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-jet-breadcrumbs jet-blocks\">\n\t\t<div class=\"jet-breadcrumbs\">\n\t\t<div class=\"jet-breadcrumbs__content\">\n\t\t<div class=\"jet-breadcrumbs__wrap\"><div class=\"jet-breadcrumbs__item\"><a href=\"https:\/\/netfoundry.io\/\" class=\"jet-breadcrumbs__item-link is-home\" rel=\"home\" title=\"NetFoundry\">NetFoundry<\/a><\/div>\n\t\t<\/div>\n\t\t<\/div>\n\t\t<\/div><\/div>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-30df123 elementor-widget elementor-widget-heading\" data-id=\"30df123\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h1 class=\"elementor-heading-title elementor-size-default\">Solution Guide: Securing AWS Zero Trust Access to S3 Buckets with Python, VPC, and Ziti SDK<\/h1>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-afdb130 elementor-widget elementor-widget-jet-listing-dynamic-terms\" data-id=\"afdb130\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"jet-listing-dynamic-terms.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"jet-listing jet-listing-dynamic-terms\"><a href=\"https:\/\/netfoundry.io\/resource-categories\/technical-brief\/\" class=\"jet-listing-dynamic-terms__link\">Technical Brief<\/a><\/div>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-0d35d8e e-grid e-con-boxed e-con e-child\" data-id=\"0d35d8e\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t<div class=\"elementor-element elementor-element-cc00323 e-grid e-con-full e-con e-child\" data-id=\"cc00323\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t<div class=\"elementor-element elementor-element-680b055 e-con-full e-flex e-con e-child\" data-id=\"680b055\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-a3f1b80 elementor-widget elementor-widget-image\" data-id=\"a3f1b80\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"1536\" height=\"804\" src=\"https:\/\/netfoundry.io\/wp-content\/uploads\/2024\/10\/solution-guide-securing-aws-zero-trust-access.jpg\" class=\"attachment-1536x1536 size-1536x1536 wp-image-41581\" alt=\"NetFoundry | Solution Guide: Securing AWS Zero Trust Access to S3 Buckets with Python, VPC, and Ziti SDK\" srcset=\"https:\/\/netfoundry.io\/wp-content\/uploads\/2024\/10\/solution-guide-securing-aws-zero-trust-access.jpg 1536w, https:\/\/netfoundry.io\/wp-content\/uploads\/2024\/10\/solution-guide-securing-aws-zero-trust-access-300x157.jpg 300w, https:\/\/netfoundry.io\/wp-content\/uploads\/2024\/10\/solution-guide-securing-aws-zero-trust-access-1024x536.jpg 1024w, https:\/\/netfoundry.io\/wp-content\/uploads\/2024\/10\/solution-guide-securing-aws-zero-trust-access-768x402.jpg 768w\" sizes=\"auto, (max-width: 1536px) 100vw, 1536px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-20eb1fd gray elementor-widget elementor-widget-text-editor\" data-id=\"20eb1fd\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h2><strong>NetFoundry AWS Zero Trust<\/strong><\/h2><p>NetFoundry AWS Zero Trust offers private, zero trust networking to <a href=\"https:\/\/aws.amazon.com\/s3\/\" target=\"_blank\" rel=\"noopener\">S3<\/a> buckets for apps, devices, and users<\/p><p><span style=\"font-weight: 400;\">In this NetFoundry solution guide, learn how to securely access your S3 buckets using <\/span><a href=\"https:\/\/aws.amazon.com\/vpc\/\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">VPC<\/span><\/a><span style=\"font-weight: 400;\"> endpoints, the<\/span><span style=\"font-weight: 400;\"> Boto3 <a href=\"https:\/\/boto3.amazonaws.com\/v1\/documentation\/api\/latest\/reference\/services\/s3.html\" target=\"_blank\" rel=\"noopener\">S3 clien<\/a><\/span><span style=\"font-weight: 400;\"><a href=\"_wp_link_placeholder\">t<\/a>, and <\/span><a href=\"https:\/\/netfoundry.io\/products\/netfoundry-platform\/netfoundry-edge\/\"><span style=\"font-weight: 400;\">NetFoundry&#8217;s Ziti SDK<\/span><\/a><span style=\"font-weight: 400;\">. This guide outlines the process to integrate NetFoundry&#8217;s secure cloud network for high performance and security in your AWS environment. You\u2019ll learn how AWS Zero Trust principles enhance security by embedding zero trust connectivity, ensuring secure access and protection for modern cloud environments<\/span><\/p><p><span style=\"font-weight: 400;\">The solution described in this guide uses<\/span> <a href=\"https:\/\/netfoundry.io\/products\/netfoundry-platform\/netfoundry-cloud\/\"><span style=\"font-weight: 400;\">NetFoundry Cloud<\/span><\/a><span style=\"font-weight: 400;\"> which makes it easy to instantly spin up highly secure, performant, edge, app or device -to-cloud networks for workloads in AWS. Our secure private overlays on the internet offer private, zero trust networking to S3 bucket and objects for apps, devices and users.\u00a0<\/span><\/p><p><span style=\"font-weight: 400;\">With NetFoundry, you can extend secure zero trust connections to S3 buckets and objects that are not public, following least privilege access and micro segmentation principles. Smart fabric from NetFoundry provides you with optimal latency routes for your apps. This ensures you can build highly secure and performant connectivity in minutes using cloud-native tools without the burden of a direct connect solution.<\/span><\/p><p><span style=\"font-weight: 400;\">This guide explores how to leverage NetFoundry to establish secure access for your private Amazon S3 buckets from a python log pusher program running a Boto3 Client for S3. We&#8217;ll establish the private overlay using a NetFoundry edge router in AWS and a NetFoundry Python SDK imported in the Py log pusher program. You can follow the approach for any Py based app or explore <\/span><a href=\"https:\/\/github.com\/openziti\/\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">our SDKs for other programming languages<\/span><\/a><span style=\"font-weight: 400;\">. We would be exploring how to access the bucket and objects from a laptop that is running a NetFoundry Ziti Desktop Edge software client.<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-d30388a e-con-full e-flex e-con e-child\" data-id=\"d30388a\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t<div class=\"elementor-element elementor-element-272edba e-con-full e-flex e-con e-child\" data-id=\"272edba\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t<div class=\"elementor-element elementor-element-e837ac3 elementor-widget elementor-widget-heading\" data-id=\"e837ac3\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Secure Cloud Access<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-e0681c5 blue-med elementor-widget elementor-widget-text-editor\" data-id=\"e0681c5\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Discover how to implement private, zero trust networking for Amazon S3 buckets using NetFoundry&#8217;s AWS solution.<\/p><p>This guide provides step-by-step instructions for integrating VPC endpoints and the Boto3 S3 client, ensuring secure access and protection for cloud environments.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-d689615 e-grid e-con-full e-con e-child\" data-id=\"d689615\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-55df81c elementor-widget elementor-widget-shortcode\" data-id=\"55df81c\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"shortcode.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-shortcode\">\t\t<div data-elementor-type=\"container\" data-elementor-id=\"32650\" class=\"elementor elementor-32650\" data-elementor-post-type=\"elementor_library\">\n\t\t\t\t<div class=\"elementor-element elementor-element-11b3293 e-grid e-con-boxed e-con e-child\" data-id=\"11b3293\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-bd342e2 elementor-widget elementor-widget-image\" data-id=\"bd342e2\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"24\" height=\"24\" src=\"https:\/\/netfoundry.io\/wp-content\/uploads\/2024\/08\/netfoundry-endpoint-gray.svg\" class=\"attachment-large size-large wp-image-36613\" alt=\"\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-8cf2ccc elementor-widget__width-inherit elementor-widget-divider--view-line elementor-widget elementor-widget-divider\" data-id=\"8cf2ccc\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"divider.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-divider\">\n\t\t\t<span class=\"elementor-divider-separator\">\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-4d93106 elementor-widget elementor-widget-image\" data-id=\"4d93106\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" width=\"24\" height=\"24\" src=\"https:\/\/netfoundry.io\/wp-content\/uploads\/2024\/08\/netfoundry-endpoint-gray.svg\" class=\"attachment-large size-large wp-image-36613\" alt=\"\" loading=\"lazy\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-5058f39 e-grid e-con-boxed e-con e-child\" data-id=\"5058f39\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t<div class=\"elementor-element elementor-element-b9d2f66 e-grid e-con-full e-con e-child\" data-id=\"b9d2f66\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t<div class=\"elementor-element elementor-element-78c016f e-con-full e-flex e-con e-child\" data-id=\"78c016f\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t<div class=\"elementor-element elementor-element-9436d4a elementor-widget elementor-widget-heading\" data-id=\"9436d4a\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Getting Started Guide<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-65a0e10 elementor-widget elementor-widget-text-editor\" data-id=\"65a0e10\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Kick off your NetFoundry journey with a free trial account! Ensure you have a network set up with at least one public router and follow our guides to meet firewall policy requirements for secure outbound access.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-4df39c3 e-con-full e-grid e-con e-child\" data-id=\"4df39c3\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-e892d6f elementor-widget elementor-widget-heading\" data-id=\"e892d6f\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">AWS Zero Trust: Getting Started<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-47b49d9 gray elementor-widget elementor-widget-text-editor\" data-id=\"47b49d9\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">What you need to get started:<\/span><\/p><ul><li>A NetFoundry Cloud account<\/li><li style=\"list-style-type: none;\"><ul><li>Go through the <a href=\"https:\/\/support.netfoundry.io\/hc\/en-us\/articles\/4418243181453-Sign-up-for-NetFoundry-Cloud-Trial-Account\">steps to create a free trial account<\/a> if you don&#8217;t have one.<\/li><\/ul><\/li><li>A network in your account with at least one public router. The articles will guide you through this process.<\/li><li style=\"list-style-type: none;\"><ul><li style=\"font-weight: 400;\" aria-level=\"1\"><a href=\"https:\/\/support.netfoundry.io\/hc\/en-us\/articles\/360045512711-Create-and-Manage-Networks\"><span style=\"font-weight: 400;\">How to create a network<\/span><\/a><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><a href=\"https:\/\/support.netfoundry.io\/hc\/en-us\/articles\/360044956032-Create-and-Manage-Edge-Routers\"><span style=\"font-weight: 400;\">Provision a public router ( NetFoundry hosted)<\/span><\/a><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><a href=\"https:\/\/support.netfoundry.io\/hc\/en-us\/articles\/4402361752717-Firewall-Requirements\"><span style=\"font-weight: 400;\">Firewall policy requirements<\/span><\/a><span style=\"font-weight: 400;\"> to provide outbound only access to the NetFoundry network<\/span><\/li><\/ul><\/li><\/ul><h3><b>Solution Architecture:<\/b><\/h3>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-ffb01e7 elementor-widget elementor-widget-image\" data-id=\"ffb01e7\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"800\" height=\"431\" src=\"https:\/\/netfoundry.io\/wp-content\/uploads\/2024\/10\/solution-architecture-1024x552.png\" class=\"attachment-large size-large wp-image-41583\" alt=\"NetFoundry | Solution Architecture\" srcset=\"https:\/\/netfoundry.io\/wp-content\/uploads\/2024\/10\/solution-architecture-1024x552.png 1024w, https:\/\/netfoundry.io\/wp-content\/uploads\/2024\/10\/solution-architecture-300x162.png 300w, https:\/\/netfoundry.io\/wp-content\/uploads\/2024\/10\/solution-architecture-768x414.png 768w, https:\/\/netfoundry.io\/wp-content\/uploads\/2024\/10\/solution-architecture.png 1262w\" sizes=\"auto, (max-width: 800px) 100vw, 800px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-e5cc52f e-grid e-con-full e-con e-child\" data-id=\"e5cc52f\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-6b25174 elementor-widget elementor-widget-shortcode\" data-id=\"6b25174\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"shortcode.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-shortcode\">\t\t<div data-elementor-type=\"container\" data-elementor-id=\"32650\" class=\"elementor elementor-32650\" data-elementor-post-type=\"elementor_library\">\n\t\t\t\t<div class=\"elementor-element elementor-element-11b3293 e-grid e-con-boxed e-con e-child\" data-id=\"11b3293\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-bd342e2 elementor-widget elementor-widget-image\" data-id=\"bd342e2\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"24\" height=\"24\" src=\"https:\/\/netfoundry.io\/wp-content\/uploads\/2024\/08\/netfoundry-endpoint-gray.svg\" class=\"attachment-large size-large wp-image-36613\" alt=\"\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-8cf2ccc elementor-widget__width-inherit elementor-widget-divider--view-line elementor-widget elementor-widget-divider\" data-id=\"8cf2ccc\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"divider.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-divider\">\n\t\t\t<span class=\"elementor-divider-separator\">\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-4d93106 elementor-widget elementor-widget-image\" data-id=\"4d93106\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" width=\"24\" height=\"24\" src=\"https:\/\/netfoundry.io\/wp-content\/uploads\/2024\/08\/netfoundry-endpoint-gray.svg\" class=\"attachment-large size-large wp-image-36613\" alt=\"\" loading=\"lazy\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-3990f99 e-grid e-con-boxed e-con e-child\" data-id=\"3990f99\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t<div class=\"elementor-element elementor-element-9b487cd e-grid e-con-full e-con e-child\" data-id=\"9b487cd\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t<div class=\"elementor-element elementor-element-a482c79 e-con-full e-grid e-con e-child\" data-id=\"a482c79\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-1ee51f6 elementor-widget elementor-widget-heading\" data-id=\"1ee51f6\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Setting up S3 bucket, VPC interface endpoint and policies in AWS<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-42145df gray elementor-widget elementor-widget-text-editor\" data-id=\"42145df\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h4><b>A. S3 Bucket:<\/b><\/h4><p><span style=\"font-weight: 400;\">You can follow the steps outlined in the following document to create a S3 bucket.<\/span><\/p><p><a href=\"https:\/\/docs.aws.amazon.com\/AmazonS3\/latest\/userguide\/creating-bucket.html\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">https:\/\/docs.aws.amazon.com\/AmazonS3\/latest\/userguide\/creating-bucket.html<\/span><\/a><\/p><p><span style=\"font-weight: 400;\">Create the bucket that is not public.<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-55f2f3c elementor-widget elementor-widget-image\" data-id=\"55f2f3c\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"800\" height=\"509\" src=\"https:\/\/netfoundry.io\/wp-content\/uploads\/2024\/10\/block-public-access-1024x651.png\" class=\"attachment-large size-large wp-image-41584\" alt=\"NetFoundry | Block Public Access\" srcset=\"https:\/\/netfoundry.io\/wp-content\/uploads\/2024\/10\/block-public-access-1024x651.png 1024w, https:\/\/netfoundry.io\/wp-content\/uploads\/2024\/10\/block-public-access-300x191.png 300w, https:\/\/netfoundry.io\/wp-content\/uploads\/2024\/10\/block-public-access-768x488.png 768w, https:\/\/netfoundry.io\/wp-content\/uploads\/2024\/10\/block-public-access.png 1085w\" sizes=\"auto, (max-width: 800px) 100vw, 800px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-7468ae8 gray elementor-widget elementor-widget-text-editor\" data-id=\"7468ae8\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h4><strong>B. Interface VPC\u00a0 endpoint:<\/strong><\/h4><ul><li><span style=\"font-weight: 400;\">Create a new VPC or use an existing VPC to provision your VPC endpoint.<\/span><\/li><li><span style=\"font-weight: 400;\">Create an interface VPC endpoint to controls access to S3 bucket. The S3 bucket would be reached within the VPC via the interface VPC endpoint.<\/span><\/li><li><span style=\"font-weight: 400;\">Refer the following document for details on using interface VPC endpoint to access a S3 bucket: <\/span><a href=\"https:\/\/docs.aws.amazon.com\/vpc\/latest\/privatelink\/create-interface-endpoint.html\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">https:\/\/docs.aws.amazon.com\/vpc\/latest\/privatelink\/create-interface-endpoint.html<\/span><\/a><span style=\"font-weight: 400;\">\u00a0<\/span><\/li><\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-195d956 elementor-widget elementor-widget-image\" data-id=\"195d956\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" width=\"800\" height=\"177\" src=\"https:\/\/netfoundry.io\/wp-content\/uploads\/2024\/10\/interface-endpoint-1024x226.png\" class=\"attachment-large size-large wp-image-41585\" alt=\"NetFoundry | Interface VPC Endpoint\" loading=\"lazy\" srcset=\"https:\/\/netfoundry.io\/wp-content\/uploads\/2024\/10\/interface-endpoint-1024x226.png 1024w, https:\/\/netfoundry.io\/wp-content\/uploads\/2024\/10\/interface-endpoint-300x66.png 300w, https:\/\/netfoundry.io\/wp-content\/uploads\/2024\/10\/interface-endpoint-768x170.png 768w, https:\/\/netfoundry.io\/wp-content\/uploads\/2024\/10\/interface-endpoint.png 1209w\" sizes=\"auto, (max-width: 800px) 100vw, 800px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-f575c65 gray elementor-widget elementor-widget-text-editor\" data-id=\"f575c65\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">Interface VPC endpoint are represented by one or more elastic network interfaces (ENIs) that are assigned private IP addresses from subnets in your VPC which will be used to configure NetFoundry service.<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-eec1aa5 elementor-widget elementor-widget-image\" data-id=\"eec1aa5\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" width=\"800\" height=\"150\" src=\"https:\/\/netfoundry.io\/wp-content\/uploads\/2024\/10\/interface-vpc-subnets.png\" class=\"attachment-large size-large wp-image-41586\" alt=\"NetFoundry | Interface VPC Endpoints - Subnets\" loading=\"lazy\" srcset=\"https:\/\/netfoundry.io\/wp-content\/uploads\/2024\/10\/interface-vpc-subnets.png 999w, https:\/\/netfoundry.io\/wp-content\/uploads\/2024\/10\/interface-vpc-subnets-300x56.png 300w, https:\/\/netfoundry.io\/wp-content\/uploads\/2024\/10\/interface-vpc-subnets-768x144.png 768w\" sizes=\"auto, (max-width: 800px) 100vw, 800px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-58bbca1 gray elementor-widget elementor-widget-text-editor\" data-id=\"58bbca1\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">You can attach an endpoint policy to your VPC endpoint that controls access to Amazon S3. The policy in the snapshot below provides the interface VPCE\u00a0 access to all resources within the VPC.<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-4ec557b elementor-widget elementor-widget-image\" data-id=\"4ec557b\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" width=\"800\" height=\"467\" src=\"https:\/\/netfoundry.io\/wp-content\/uploads\/2024\/10\/endpoint-policy.png\" class=\"attachment-large size-large wp-image-41587\" alt=\"NetFoundry | Endpoint Policy\" loading=\"lazy\" srcset=\"https:\/\/netfoundry.io\/wp-content\/uploads\/2024\/10\/endpoint-policy.png 1012w, https:\/\/netfoundry.io\/wp-content\/uploads\/2024\/10\/endpoint-policy-300x175.png 300w, https:\/\/netfoundry.io\/wp-content\/uploads\/2024\/10\/endpoint-policy-768x449.png 768w\" sizes=\"auto, (max-width: 800px) 100vw, 800px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-ca93c34 gray elementor-widget elementor-widget-text-editor\" data-id=\"ca93c34\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h4><strong>C. S3 Bucket Policy:<\/strong><\/h4><p><span style=\"font-weight: 400;\">Once the VPCe and S3 bucket are provisioned, the next step is to provision the S3 bucket policy. With Amazon S3 bucket policies, you can secure access to objects in your buckets, so that only\u00a0 services or users with the appropriate permissions can access them. For this demo, we&#8217;re using a bucket policy to restrict access by a\u00a0 VPC endpoint . Below is a bucket policy that allows access to the specific VPCe &#8221; <\/span><span style=\"font-weight: 400;\">vpce-0db2ff4e77e2622ba&#8221; <\/span><span style=\"font-weight: 400;\">\u00a0to perform actions on the S3 bucket &#8220;sdktestingwithboto3&#8221; and its objects.<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-075628c elementor-widget elementor-widget-image\" data-id=\"075628c\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" width=\"800\" height=\"588\" src=\"https:\/\/netfoundry.io\/wp-content\/uploads\/2024\/10\/bucket-policy.png\" class=\"attachment-large size-large wp-image-41588\" alt=\"NetFoundry | Bucket Policy\" loading=\"lazy\" srcset=\"https:\/\/netfoundry.io\/wp-content\/uploads\/2024\/10\/bucket-policy.png 990w, https:\/\/netfoundry.io\/wp-content\/uploads\/2024\/10\/bucket-policy-300x221.png 300w, https:\/\/netfoundry.io\/wp-content\/uploads\/2024\/10\/bucket-policy-768x565.png 768w\" sizes=\"auto, (max-width: 800px) 100vw, 800px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-7b5d254 e-con-full e-flex e-con e-child\" data-id=\"7b5d254\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t<div class=\"elementor-element elementor-element-4f54ed9 elementor-widget elementor-widget-heading\" data-id=\"4f54ed9\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Setting Up S3 Access<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-8251d96 blue-med elementor-widget elementor-widget-text-editor\" data-id=\"8251d96\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Securely set up your S3 bucket by creating it as private, configuring an interface VPC endpoint, and applying a bucket policy that restricts access to authorized services only.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-9877476 e-grid e-con-full e-con e-child\" data-id=\"9877476\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-73cca78 elementor-widget elementor-widget-shortcode\" data-id=\"73cca78\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"shortcode.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-shortcode\">\t\t<div data-elementor-type=\"container\" data-elementor-id=\"32650\" class=\"elementor elementor-32650\" data-elementor-post-type=\"elementor_library\">\n\t\t\t\t<div class=\"elementor-element elementor-element-11b3293 e-grid e-con-boxed e-con e-child\" data-id=\"11b3293\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-bd342e2 elementor-widget elementor-widget-image\" data-id=\"bd342e2\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"24\" height=\"24\" src=\"https:\/\/netfoundry.io\/wp-content\/uploads\/2024\/08\/netfoundry-endpoint-gray.svg\" class=\"attachment-large size-large wp-image-36613\" alt=\"\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-8cf2ccc elementor-widget__width-inherit elementor-widget-divider--view-line elementor-widget elementor-widget-divider\" data-id=\"8cf2ccc\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"divider.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-divider\">\n\t\t\t<span class=\"elementor-divider-separator\">\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-4d93106 elementor-widget elementor-widget-image\" data-id=\"4d93106\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" width=\"24\" height=\"24\" src=\"https:\/\/netfoundry.io\/wp-content\/uploads\/2024\/08\/netfoundry-endpoint-gray.svg\" class=\"attachment-large size-large wp-image-36613\" alt=\"\" loading=\"lazy\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-132abfc e-grid e-con-boxed e-con e-child\" data-id=\"132abfc\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t<div class=\"elementor-element elementor-element-dbd8243 e-grid e-con-full e-con e-child\" data-id=\"dbd8243\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t<div class=\"elementor-element elementor-element-af4738c e-con-full e-flex e-con e-child\" data-id=\"af4738c\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t<div class=\"elementor-element elementor-element-7aedb21 elementor-widget elementor-widget-heading\" data-id=\"7aedb21\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Deploying NetFoundry Edge Router<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-30ed715 elementor-widget elementor-widget-text-editor\" data-id=\"30ed715\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Set up the NetFoundry edge router as your WAN gateway within the same VPC as your interface VPC endpoint, ensuring secure access to your S3 bucket.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-0994c3b e-con-full e-grid e-con e-child\" data-id=\"0994c3b\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-2cfb337 elementor-widget elementor-widget-heading\" data-id=\"2cfb337\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Spin up a NetFoundry edge router in AWS<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-9b1ca1d gray elementor-widget elementor-widget-text-editor\" data-id=\"9b1ca1d\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">The NetFoundry edge router is the WAN gateway in the VPC that helps you to reach the S3 bucket via the VPC endpoint over a private and secure zero trust overlay. The ER is deployed on a EC2 instance. You can also deploy the ER in a container.<\/span><\/p><p><a href=\"https:\/\/support.netfoundry.io\/hc\/en-us\/articles\/360016342971-Deployment-Guide-for-AWS-Edge-Routers\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">Follow the instructions to spin up the NetFoundry edge router in AWS<\/span><\/a><span style=\"font-weight: 400;\"> from the AWS marketplace. The router has to be spun up in the same VPC as your interface VPC endpoint or have the reachability to the VPC endpoint if it is spun up in a different VPC.<\/span><\/p><p><span style=\"font-weight: 400;\">The router should show registered and online once provisioned successfully.\u00a0<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-c8cd141 elementor-widget elementor-widget-image\" data-id=\"c8cd141\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" width=\"800\" height=\"202\" src=\"https:\/\/netfoundry.io\/wp-content\/uploads\/2024\/10\/spin-up-edge-router-1024x259.png\" class=\"attachment-large size-large wp-image-41589\" alt=\"NetFoundry | Spin-Up Edge Router\" loading=\"lazy\" srcset=\"https:\/\/netfoundry.io\/wp-content\/uploads\/2024\/10\/spin-up-edge-router-1024x259.png 1024w, https:\/\/netfoundry.io\/wp-content\/uploads\/2024\/10\/spin-up-edge-router-300x76.png 300w, https:\/\/netfoundry.io\/wp-content\/uploads\/2024\/10\/spin-up-edge-router-768x194.png 768w, https:\/\/netfoundry.io\/wp-content\/uploads\/2024\/10\/spin-up-edge-router.png 1283w\" sizes=\"auto, (max-width: 800px) 100vw, 800px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-376f64e e-grid e-con-full e-con e-child\" data-id=\"376f64e\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-10f6602 elementor-widget elementor-widget-shortcode\" data-id=\"10f6602\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"shortcode.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-shortcode\">\t\t<div data-elementor-type=\"container\" data-elementor-id=\"32650\" class=\"elementor elementor-32650\" data-elementor-post-type=\"elementor_library\">\n\t\t\t\t<div class=\"elementor-element elementor-element-11b3293 e-grid e-con-boxed e-con e-child\" data-id=\"11b3293\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-bd342e2 elementor-widget elementor-widget-image\" data-id=\"bd342e2\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"24\" height=\"24\" src=\"https:\/\/netfoundry.io\/wp-content\/uploads\/2024\/08\/netfoundry-endpoint-gray.svg\" class=\"attachment-large size-large wp-image-36613\" alt=\"\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-8cf2ccc elementor-widget__width-inherit elementor-widget-divider--view-line elementor-widget elementor-widget-divider\" data-id=\"8cf2ccc\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"divider.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-divider\">\n\t\t\t<span class=\"elementor-divider-separator\">\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-4d93106 elementor-widget elementor-widget-image\" data-id=\"4d93106\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" width=\"24\" height=\"24\" src=\"https:\/\/netfoundry.io\/wp-content\/uploads\/2024\/08\/netfoundry-endpoint-gray.svg\" class=\"attachment-large size-large wp-image-36613\" alt=\"\" loading=\"lazy\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-cc03e81 e-grid e-con-boxed e-con e-child\" data-id=\"cc03e81\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t<div class=\"elementor-element elementor-element-16517dc e-grid e-con-full e-con e-child\" data-id=\"16517dc\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t<div class=\"elementor-element elementor-element-fac74b5 e-con-full e-grid e-con e-child\" data-id=\"fac74b5\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-b78cf60 elementor-widget elementor-widget-heading\" data-id=\"b78cf60\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Create your identity, service and service policy<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-b46bea8 gray elementor-widget elementor-widget-text-editor\" data-id=\"b46bea8\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<ul><li><span style=\"font-weight: 400;\">You can access your S3 bucket via a NetFoundry endpoint software on your laptop or via ziti python SDK embedded into your application that requires access to S3 bucket.<\/span><ul><li style=\"font-weight: 400;\" aria-level=\"1\"><a href=\"https:\/\/support.netfoundry.io\/hc\/en-us\/articles\/360047133551-Create-and-Manage-Identities\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">Create your identity<\/span><\/a><span style=\"font-weight: 400;\">\u00a0each to access the S3 bucket from the NetFoundry Ziti Py SDK and the Ziti desktop edge<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><a href=\"https:\/\/support.netfoundry.io\/hc\/en-us\/articles\/360045503311-Create-and-Manage-Services\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">Create your service<\/span><\/a><span style=\"font-weight: 400;\"> for accessing S3 bucket via interface VPC endpoint.<\/span><span style=\"font-weight: 400;\">The following URL is used for private access to S3 buckets associated with the interface VPC endpoint from the boto3 client for S3 imported in the python program.<\/span><\/li><\/ul><\/li><\/ul><p style=\"padding-left: 80px;\"><a href=\"https:\/\/bucket.vpce-0db2ff4e77e2622ba-uf7ato7f.s3.ap-southeast-1.vpce.amazonaws.com\/\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">https:\/\/sdktestingwithboto3.vpce-0db2ff4e77e2622ba-uf7ato7f.s3.ap-southeast-1.vpce.amazonaws.com<\/span><\/a><\/p><ul><li><span style=\"font-weight: 400;\">From the laptop running ziti desktop edge, the following URL is used to access the object netfoundry.jpg<\/span><\/li><\/ul><p style=\"padding-left: 80px;\"><a href=\"https:\/\/sdktestingwithboto3.s3.ap-southeast-1.amazonaws.com\/netfoundry.jpg\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">https:\/\/sdktestingwithboto3.s3.ap-southeast-1.amazonaws.com\/netfoundry.jpg<\/span><\/a><span style=\"font-weight: 400;\">\u00a0<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-176a609 elementor-widget elementor-widget-image\" data-id=\"176a609\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" width=\"800\" height=\"495\" src=\"https:\/\/netfoundry.io\/wp-content\/uploads\/2024\/10\/create-your-identity-service-policy-1024x634.png\" class=\"attachment-large size-large wp-image-41590\" alt=\"NetFoundry | Creating Your Identity, Service and Service Policy\" loading=\"lazy\" srcset=\"https:\/\/netfoundry.io\/wp-content\/uploads\/2024\/10\/create-your-identity-service-policy-1024x634.png 1024w, https:\/\/netfoundry.io\/wp-content\/uploads\/2024\/10\/create-your-identity-service-policy-300x186.png 300w, https:\/\/netfoundry.io\/wp-content\/uploads\/2024\/10\/create-your-identity-service-policy-768x475.png 768w, https:\/\/netfoundry.io\/wp-content\/uploads\/2024\/10\/create-your-identity-service-policy.png 1133w\" sizes=\"auto, (max-width: 800px) 100vw, 800px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-1415c62 gray elementor-widget elementor-widget-text-editor\" data-id=\"1415c62\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">The service configuration is configured with the &#8220;wildcard&#8221; domain name using the DNS name of the interface VPC endpoint and the private IP address attached to elastic network interface (ENI) .<\/span><\/p><p><span style=\"font-weight: 400;\">The identity is that of the customer edge router that was provisioned in AWS from the marketplace.<\/span><\/p><p><span style=\"font-weight: 400;\">Port 443 has been selected for private access within the VPC via the interface VPC endpoint.<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-daaf2c3 elementor-widget elementor-widget-image\" data-id=\"daaf2c3\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" width=\"502\" height=\"681\" src=\"https:\/\/netfoundry.io\/wp-content\/uploads\/2024\/10\/edit-your-service-details.png\" class=\"attachment-large size-large wp-image-41591\" alt=\"NetFoundry | Edit Service Details\" loading=\"lazy\" srcset=\"https:\/\/netfoundry.io\/wp-content\/uploads\/2024\/10\/edit-your-service-details.png 502w, https:\/\/netfoundry.io\/wp-content\/uploads\/2024\/10\/edit-your-service-details-221x300.png 221w\" sizes=\"auto, (max-width: 502px) 100vw, 502px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-9b7f0d5 gray elementor-widget elementor-widget-text-editor\" data-id=\"9b7f0d5\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<ul><li style=\"list-style-type: none;\"><ul><li style=\"font-weight: 400;\" aria-level=\"1\"><a href=\"https:\/\/support.netfoundry.io\/hc\/en-us\/articles\/360045545211-Create-and-Manage-Service-Policies\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">Create your service policy<\/span><\/a><span style=\"font-weight: 400;\"> to allow your identity (or identities) to access the S3 Access service.<\/span><\/li><\/ul><\/li><\/ul><p style=\"padding-left: 80px;\"><span style=\"font-weight: 400;\">Create a service policy to allow the identities for devices or the router identity deployed in your factory or site to access the S3 bucket over the highly secure NetFoundry cloud network.<\/span><\/p><p style=\"padding-left: 80px;\"><span style=\"font-weight: 400;\">The service policy that allows identities to access the S3 bucket has been created as shown below:<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-e3472ad elementor-widget elementor-widget-image\" data-id=\"e3472ad\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" width=\"800\" height=\"415\" src=\"https:\/\/netfoundry.io\/wp-content\/uploads\/2024\/10\/service-policy-1024x531.png\" class=\"attachment-large size-large wp-image-41592\" alt=\"NetFoundry | Create Your Service Policy\" loading=\"lazy\" srcset=\"https:\/\/netfoundry.io\/wp-content\/uploads\/2024\/10\/service-policy-1024x531.png 1024w, https:\/\/netfoundry.io\/wp-content\/uploads\/2024\/10\/service-policy-300x155.png 300w, https:\/\/netfoundry.io\/wp-content\/uploads\/2024\/10\/service-policy-768x398.png 768w, https:\/\/netfoundry.io\/wp-content\/uploads\/2024\/10\/service-policy.png 1237w\" sizes=\"auto, (max-width: 800px) 100vw, 800px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-4d8c310 e-con-full e-flex e-con e-child\" data-id=\"4d8c310\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t<div class=\"elementor-element elementor-element-d72cc6b elementor-widget elementor-widget-heading\" data-id=\"d72cc6b\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Accessing S3 with NetFoundry<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-6ce599e blue-med elementor-widget elementor-widget-text-editor\" data-id=\"6ce599e\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Access your S3 bucket securely using the NetFoundry Ziti SDK or the Ziti Desktop Edge.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-bf536a9 e-grid e-con-boxed e-con e-child\" data-id=\"bf536a9\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t<div class=\"elementor-element elementor-element-4bba068 e-grid e-con-full e-con e-child\" data-id=\"4bba068\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t<div class=\"elementor-element elementor-element-6eb5cb3 e-con-full e-flex e-con e-child\" data-id=\"6eb5cb3\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t<div class=\"elementor-element elementor-element-079d584 elementor-widget elementor-widget-heading\" data-id=\"079d584\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Secure S3 Access\n<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-65250b4 elementor-widget elementor-widget-text-editor\" data-id=\"65250b4\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Easily access AWS S3 private buckets using Python with the Ziti SDK. Download the demo program to generate log files and upload them securely over the NetFoundry Cloud network. Start by enrolling your identity and running the provided commands.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-8b50afc e-con-full e-grid e-con e-child\" data-id=\"8b50afc\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-1f25e1f elementor-widget elementor-widget-heading\" data-id=\"1f25e1f\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Accessing S3 bucket and objects using a Boto3 client + Ziti Python SDK over the NetFoundry Cloud<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-8c491a0 gray elementor-widget elementor-widget-text-editor\" data-id=\"8c491a0\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">Download demo python program that imports AWS&#8217;s boto3 and ziti SDK to access the private buckets via the Ziti. The Py program generates logfiles and uploads them to the S3 bucket, creating a folder and uploading the log files to the folder over the NetFoundry Cloud network.<\/span><\/p><p><a href=\"https:\/\/github.com\/openziti-test-kitchen\/boto-demo\/tree\/main\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">https:\/\/github.com\/openziti-test-kitchen\/boto-demo\/tree\/main<\/span><\/a><\/p><p><span style=\"font-weight: 400;\">Use the following commands to run the Py program. You can run\u00a0 export ZITI_LOG=4 to view the logs:<\/span><\/p><p><span style=\"font-weight: 400;\">python boto-demo-main\/s3z\/s3z.py \\<\/span><\/p><p><span style=\"font-weight: 400;\">&#8211;ziti-identity-file &#8220;\/d\/S3\/identityname.json&#8221; \\<\/span><\/p><p><span style=\"font-weight: 400;\">&#8211;bucket-name &#8220;sdktestingwithboto3&#8221; \\<\/span><\/p><p><span style=\"font-weight: 400;\">&#8211;bucket-endpoint &#8220;https:\/\/bucket.vpce-0db2ff4e77e2622ba-uf7ato7f.s3.ap-southeast-1.vpce.amazonaws.com&#8221; \\<\/span><\/p><p><span style=\"font-weight: 400;\">&#8211;push-log-dir &#8220;logs&#8221; \\<\/span><\/p><p><span style=\"font-weight: 400;\">&#8211;object-prefix &#8220;foldername&#8221;<\/span><\/p><p><span style=\"font-weight: 400;\">The identityname.json is the json file of the identity that is registered with the NetFoundry network.\u00a0<\/span><\/p><p><span style=\"font-weight: 400;\">How to enroll the jwt obtained from the console and generate the json:\u00a0<\/span><\/p><p><span style=\"font-weight: 400;\">python -m openziti enroll &#8211;jwt identityname.jwt &#8211;identity identityname.json<\/span><\/p><p><a href=\"https:\/\/github.com\/openziti\/ziti-sdk-py\/blob\/main\/sample\/README.md#get-and-enroll-an-identity\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">https:\/\/github.com\/openziti\/ziti-sdk-py\/blob\/main\/sample\/README.md#get-and-enroll-an-identity<\/span><\/a><span style=\"font-weight: 400;\">\u00a0<\/span><\/p><p><span style=\"font-weight: 400;\">The bucket name is the name of your S3 bucket.<\/span><\/p><p><span style=\"font-weight: 400;\">The bucket-endpoint is the DNS of the S3 VPC endpoint prefixed with your bucket name.<\/span><\/p><p><span style=\"font-weight: 400;\">The object-prefix is the name of the folder you want to create in S3.<\/span><\/p><p><span style=\"font-weight: 400;\">Once you execute the Py program, you will find the output like the one below:<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-13a6a2c elementor-widget elementor-widget-image\" data-id=\"13a6a2c\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" width=\"800\" height=\"151\" src=\"https:\/\/netfoundry.io\/wp-content\/uploads\/2024\/10\/py-program-output-1024x193.png\" class=\"attachment-large size-large wp-image-41593\" alt=\"NetFoundry | Py Program Output\" loading=\"lazy\" srcset=\"https:\/\/netfoundry.io\/wp-content\/uploads\/2024\/10\/py-program-output-1024x193.png 1024w, https:\/\/netfoundry.io\/wp-content\/uploads\/2024\/10\/py-program-output-300x57.png 300w, https:\/\/netfoundry.io\/wp-content\/uploads\/2024\/10\/py-program-output-768x145.png 768w, https:\/\/netfoundry.io\/wp-content\/uploads\/2024\/10\/py-program-output.png 1423w\" sizes=\"auto, (max-width: 800px) 100vw, 800px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-056868f gray elementor-widget elementor-widget-text-editor\" data-id=\"056868f\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">The folder is created in your S3 bucket:<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-0e4c2cf elementor-widget elementor-widget-image\" data-id=\"0e4c2cf\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" width=\"800\" height=\"398\" src=\"https:\/\/netfoundry.io\/wp-content\/uploads\/2024\/10\/s3-bucket-1024x510.png\" class=\"attachment-large size-large wp-image-41594\" alt=\"NetFoundry | S3 Bucket\" loading=\"lazy\" srcset=\"https:\/\/netfoundry.io\/wp-content\/uploads\/2024\/10\/s3-bucket-1024x510.png 1024w, https:\/\/netfoundry.io\/wp-content\/uploads\/2024\/10\/s3-bucket-300x149.png 300w, https:\/\/netfoundry.io\/wp-content\/uploads\/2024\/10\/s3-bucket-768x383.png 768w, https:\/\/netfoundry.io\/wp-content\/uploads\/2024\/10\/s3-bucket.png 1046w\" sizes=\"auto, (max-width: 800px) 100vw, 800px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-ea64358 gray elementor-widget elementor-widget-text-editor\" data-id=\"ea64358\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">And the log files are uploaded in the folder:<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-a21aa07 elementor-widget elementor-widget-image\" data-id=\"a21aa07\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" width=\"800\" height=\"556\" src=\"https:\/\/netfoundry.io\/wp-content\/uploads\/2024\/10\/log-files-1024x712.png\" class=\"attachment-large size-large wp-image-41595\" alt=\"NetFoundry | Log Files\" loading=\"lazy\" srcset=\"https:\/\/netfoundry.io\/wp-content\/uploads\/2024\/10\/log-files-1024x712.png 1024w, https:\/\/netfoundry.io\/wp-content\/uploads\/2024\/10\/log-files-300x209.png 300w, https:\/\/netfoundry.io\/wp-content\/uploads\/2024\/10\/log-files-768x534.png 768w, https:\/\/netfoundry.io\/wp-content\/uploads\/2024\/10\/log-files.png 1043w\" sizes=\"auto, (max-width: 800px) 100vw, 800px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-c8a0c16 e-grid e-con-full e-con e-child\" data-id=\"c8a0c16\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-8fcec90 elementor-widget elementor-widget-shortcode\" data-id=\"8fcec90\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"shortcode.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-shortcode\">\t\t<div data-elementor-type=\"container\" data-elementor-id=\"32650\" class=\"elementor elementor-32650\" data-elementor-post-type=\"elementor_library\">\n\t\t\t\t<div class=\"elementor-element elementor-element-11b3293 e-grid e-con-boxed e-con e-child\" data-id=\"11b3293\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-bd342e2 elementor-widget elementor-widget-image\" data-id=\"bd342e2\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"24\" height=\"24\" src=\"https:\/\/netfoundry.io\/wp-content\/uploads\/2024\/08\/netfoundry-endpoint-gray.svg\" class=\"attachment-large size-large wp-image-36613\" alt=\"\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-8cf2ccc elementor-widget__width-inherit elementor-widget-divider--view-line elementor-widget elementor-widget-divider\" data-id=\"8cf2ccc\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"divider.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-divider\">\n\t\t\t<span class=\"elementor-divider-separator\">\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-4d93106 elementor-widget elementor-widget-image\" data-id=\"4d93106\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" width=\"24\" height=\"24\" src=\"https:\/\/netfoundry.io\/wp-content\/uploads\/2024\/08\/netfoundry-endpoint-gray.svg\" class=\"attachment-large size-large wp-image-36613\" alt=\"\" loading=\"lazy\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-51fc7aa e-grid e-con-boxed e-con e-child\" data-id=\"51fc7aa\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t<div class=\"elementor-element elementor-element-ae50c46 e-grid e-con-full e-con e-child\" data-id=\"ae50c46\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t<div class=\"elementor-element elementor-element-1d0e07c e-con-full e-grid e-con e-child\" data-id=\"1d0e07c\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-d46a04c elementor-widget elementor-widget-heading\" data-id=\"d46a04c\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Accessing S3 bucket and objects using a Ziti desktop edge over the NetFoundry Cloud<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-db7c9c2 gray elementor-widget elementor-widget-text-editor\" data-id=\"db7c9c2\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">Install the desktop edge based on the OS of your device: <\/span><a href=\"https:\/\/netfoundry.io\/downloads\/\"><span style=\"font-weight: 400;\">https:\/\/netfoundry.io\/downloads\/<\/span><\/a><span style=\"font-weight: 400;\">\u00a0<\/span><\/p><p><span style=\"font-weight: 400;\">You&#8217;ll find the installation instructions for the endpoints in the respective sections.<\/span><\/p><p><a href=\"https:\/\/support.netfoundry.io\/hc\/en-us\/sections\/360002445391-Identities\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">Register your identity to the network from your endpoint software.\u00a0<\/span><\/a><\/p><p><span style=\"font-weight: 400;\">With the required service policy in place, you should see the S3 service listed on your endpoint.<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-413e8af elementor-widget elementor-widget-image\" data-id=\"413e8af\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" width=\"470\" height=\"561\" src=\"https:\/\/netfoundry.io\/wp-content\/uploads\/2024\/10\/listed-s3-service.png\" class=\"attachment-large size-large wp-image-41596\" alt=\"NetFoundry | Listed S3 Service\" loading=\"lazy\" srcset=\"https:\/\/netfoundry.io\/wp-content\/uploads\/2024\/10\/listed-s3-service.png 470w, https:\/\/netfoundry.io\/wp-content\/uploads\/2024\/10\/listed-s3-service-251x300.png 251w\" sizes=\"auto, (max-width: 470px) 100vw, 470px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-12b45e4 gray elementor-widget elementor-widget-text-editor\" data-id=\"12b45e4\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">Access the S3 object from your device over the NetFoundry network:<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-4a6214d elementor-widget elementor-widget-image\" data-id=\"4a6214d\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" width=\"800\" height=\"466\" src=\"https:\/\/netfoundry.io\/wp-content\/uploads\/2024\/10\/access-s3-object-1024x597.png\" class=\"attachment-large size-large wp-image-41597\" alt=\"NetFoundry | Access S3 Object\" loading=\"lazy\" srcset=\"https:\/\/netfoundry.io\/wp-content\/uploads\/2024\/10\/access-s3-object-1024x597.png 1024w, https:\/\/netfoundry.io\/wp-content\/uploads\/2024\/10\/access-s3-object-300x175.png 300w, https:\/\/netfoundry.io\/wp-content\/uploads\/2024\/10\/access-s3-object-768x448.png 768w, https:\/\/netfoundry.io\/wp-content\/uploads\/2024\/10\/access-s3-object.png 1099w\" sizes=\"auto, (max-width: 800px) 100vw, 800px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-2d383c4 e-con-full e-flex e-con e-child\" data-id=\"2d383c4\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t<div class=\"elementor-element elementor-element-e295562 elementor-widget elementor-widget-heading\" data-id=\"e295562\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Unlock S3 Connectivity<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-9d65c55 blue-med elementor-widget elementor-widget-text-editor\" data-id=\"9d65c55\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Install the desktop edge for your OS and gain seamless access to S3 objects via the NetFoundry network. Register your identity and follow the instructions to begin.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-d0499b9 e-grid e-con-full e-con e-child\" data-id=\"d0499b9\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-b7982fd elementor-widget elementor-widget-shortcode\" data-id=\"b7982fd\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"shortcode.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-shortcode\">\t\t<div data-elementor-type=\"container\" data-elementor-id=\"32650\" class=\"elementor elementor-32650\" data-elementor-post-type=\"elementor_library\">\n\t\t\t\t<div class=\"elementor-element elementor-element-11b3293 e-grid e-con-boxed e-con e-child\" data-id=\"11b3293\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-bd342e2 elementor-widget elementor-widget-image\" data-id=\"bd342e2\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"24\" height=\"24\" src=\"https:\/\/netfoundry.io\/wp-content\/uploads\/2024\/08\/netfoundry-endpoint-gray.svg\" class=\"attachment-large size-large wp-image-36613\" alt=\"\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-8cf2ccc elementor-widget__width-inherit elementor-widget-divider--view-line elementor-widget elementor-widget-divider\" data-id=\"8cf2ccc\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"divider.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-divider\">\n\t\t\t<span class=\"elementor-divider-separator\">\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-4d93106 elementor-widget elementor-widget-image\" data-id=\"4d93106\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" width=\"24\" height=\"24\" src=\"https:\/\/netfoundry.io\/wp-content\/uploads\/2024\/08\/netfoundry-endpoint-gray.svg\" class=\"attachment-large size-large wp-image-36613\" alt=\"\" loading=\"lazy\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-51c93b6 e-grid e-con-boxed e-con e-child\" data-id=\"51c93b6\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t<div class=\"elementor-element elementor-element-8aade14 e-grid e-con-full e-con e-child\" data-id=\"8aade14\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t<div class=\"elementor-element elementor-element-dea0e60 e-con-full e-flex e-con e-child\" data-id=\"dea0e60\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t<div class=\"elementor-element elementor-element-05c3e4a elementor-widget elementor-widget-heading\" data-id=\"05c3e4a\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">AWS Zero Trust Security<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-326c8dd elementor-widget elementor-widget-text-editor\" data-id=\"326c8dd\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Adopt AWS Zero Trust to enhance your cloud security, prevent unauthorized access, and protect your applications and data in a complex digital landscape.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-61dfa2a e-con-full e-grid e-con e-child\" data-id=\"61dfa2a\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-a1e42fe elementor-widget elementor-widget-heading\" data-id=\"a1e42fe\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Conclusion: The Power of AWS Zero Trust<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-966b4ea gray elementor-widget elementor-widget-text-editor\" data-id=\"966b4ea\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">Incorporating AWS Zero Trust principles into your cloud infrastructure ensures that your systems are protected by advanced, modern security measures. By embedding zero trust connectivity, organizations can prevent unauthorized access and reduce the risk of security breaches, all while maintaining seamless operations. AWS Zero Trust empowers businesses to secure their applications, data, and users in an increasingly complex digital landscape.<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-d4d1e94 e-grid e-con-boxed e-con e-child\" data-id=\"d4d1e94\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-9ec6c6b elementor-widget__width-inherit elementor-post-navigation-borders-yes elementor-widget elementor-widget-post-navigation\" data-id=\"9ec6c6b\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"post-navigation.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-post-navigation\" role=\"navigation\" aria-label=\"Post Navigation\">\n\t\t\t<div class=\"elementor-post-navigation__prev elementor-post-navigation__link\">\n\t\t\t\t<a href=\"https:\/\/netfoundry.io\/resources\/netfoundry-and-zero-trust-outcomes-in-isa-iec-62443\/\" rel=\"prev\"><span class=\"post-navigation__arrow-wrapper post-navigation__arrow-prev\"><svg aria-hidden=\"true\" class=\"e-font-icon-svg e-fas-angle-left\" viewBox=\"0 0 256 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M31.7 239l136-136c9.4-9.4 24.6-9.4 33.9 0l22.6 22.6c9.4 9.4 9.4 24.6 0 33.9L127.9 256l96.4 96.4c9.4 9.4 9.4 24.6 0 33.9L201.7 409c-9.4 9.4-24.6 9.4-33.9 0l-136-136c-9.5-9.4-9.5-24.6-.1-34z\"><\/path><\/svg><span class=\"elementor-screen-only\">Prev<\/span><\/span><span class=\"elementor-post-navigation__link__prev\"><span class=\"post-navigation__prev--label\">Previous<\/span><span class=\"post-navigation__prev--title\">NetFoundry and Zero Trust Outcomes in ISA\/IEC 62443<\/span><\/span><\/a>\t\t\t<\/div>\n\t\t\t\t\t\t\t<div class=\"elementor-post-navigation__separator-wrapper\">\n\t\t\t\t\t<div class=\"elementor-post-navigation__separator\"><\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t<div class=\"elementor-post-navigation__next elementor-post-navigation__link\">\n\t\t\t\t<a href=\"https:\/\/netfoundry.io\/resources\/netfoundry-cloud-simplifying-zero-trust-networking-deployments\/\" rel=\"next\"><span class=\"elementor-post-navigation__link__next\"><span class=\"post-navigation__next--label\">Next<\/span><span class=\"post-navigation__next--title\">NetFoundry Cloud: Simplifying Zero Trust Networking Deployments<\/span><\/span><span class=\"post-navigation__arrow-wrapper post-navigation__arrow-next\"><svg aria-hidden=\"true\" class=\"e-font-icon-svg e-fas-angle-right\" viewBox=\"0 0 256 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M224.3 273l-136 136c-9.4 9.4-24.6 9.4-33.9 0l-22.6-22.6c-9.4-9.4-9.4-24.6 0-33.9l96.4-96.4-96.4-96.4c-9.4-9.4-9.4-24.6 0-33.9L54.3 103c9.4-9.4 24.6-9.4 33.9 0l136 136c9.5 9.4 9.5 24.6.1 34z\"><\/path><\/svg><span class=\"elementor-screen-only\">Next<\/span><\/span><\/a>\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/main>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>NetFoundry White Papers NetFoundry AWS Zero Trust NetFoundry AWS Zero Trust offers private, zero trust networking to S3 buckets for apps, devices, and users In this NetFoundry solution guide, learn how to securely access your S3 buckets using VPC endpoints, the Boto3 S3 client, and NetFoundry&#8217;s Ziti SDK. This guide outlines the process to integrate [&hellip;]<\/p>\n","protected":false},"author":94,"featured_media":41581,"menu_order":0,"template":"","format":"standard","meta":{"content-type":"","footnotes":""},"feature":[],"resource-tags":[864,868,871,870,866,865,783,867,735,869],"resource-categories":[987],"class_list":["post-41579","resources","type-resources","status-publish","format-standard","has-post-thumbnail","hentry","resource-tags-aws-zero-trust","resource-tags-boto3-s3-client","resource-tags-edge-router-security","resource-tags-private-cloud-connectivity","resource-tags-python-application-security","resource-tags-s3-bucket-security","resource-tags-secure-networking","resource-tags-vpc-endpoint","resource-tags-zero-trust-architecture","resource-tags-ziti-sdk","resource-categories-technical-brief"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v27.3 (Yoast SEO v27.3) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>Solution Guide: Securing AWS Zero Trust Access to S3 Buckets with Python, VPC, and Ziti SDK<\/title>\n<meta name=\"description\" content=\"Learn how AWS Zero Trust principles enhance security by embedding zero trust connectivity, ensuring secure access and protection for modern cloud environments.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/netfoundry.io\/resources\/solution-guide-securing-aws-zero-trust-access-to-s3-buckets-with-python-vpc-and-ziti-sdk\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Solution Guide: Securing AWS Zero Trust Access to S3 Buckets with Python, VPC, and Ziti SDK\" \/>\n<meta property=\"og:description\" content=\"Learn how AWS Zero Trust principles enhance security by embedding zero trust connectivity, ensuring secure access and protection for modern cloud environments.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/netfoundry.io\/resources\/solution-guide-securing-aws-zero-trust-access-to-s3-buckets-with-python-vpc-and-ziti-sdk\/\" \/>\n<meta property=\"og:site_name\" content=\"NetFoundry\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/netfoundry.io\" \/>\n<meta property=\"article:modified_time\" content=\"2026-01-29T17:19:35+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/netfoundry.io\/wp-content\/uploads\/2024\/10\/solution-guide-securing-aws-zero-trust-access.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1536\" \/>\n\t<meta property=\"og:image:height\" content=\"804\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:site\" content=\"@netfoundry\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"13 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/netfoundry.io\\\/resources\\\/solution-guide-securing-aws-zero-trust-access-to-s3-buckets-with-python-vpc-and-ziti-sdk\\\/\",\"url\":\"https:\\\/\\\/netfoundry.io\\\/resources\\\/solution-guide-securing-aws-zero-trust-access-to-s3-buckets-with-python-vpc-and-ziti-sdk\\\/\",\"name\":\"Solution Guide: Securing AWS Zero Trust Access to S3 Buckets with Python, VPC, and Ziti SDK\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/netfoundry.io\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/netfoundry.io\\\/resources\\\/solution-guide-securing-aws-zero-trust-access-to-s3-buckets-with-python-vpc-and-ziti-sdk\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/netfoundry.io\\\/resources\\\/solution-guide-securing-aws-zero-trust-access-to-s3-buckets-with-python-vpc-and-ziti-sdk\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/netfoundry.io\\\/wp-content\\\/uploads\\\/2024\\\/10\\\/solution-guide-securing-aws-zero-trust-access.jpg\",\"datePublished\":\"2024-10-18T13:49:04+00:00\",\"dateModified\":\"2026-01-29T17:19:35+00:00\",\"description\":\"Learn how AWS Zero Trust principles enhance security by embedding zero trust connectivity, ensuring secure access and protection for modern cloud environments.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/netfoundry.io\\\/resources\\\/solution-guide-securing-aws-zero-trust-access-to-s3-buckets-with-python-vpc-and-ziti-sdk\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/netfoundry.io\\\/resources\\\/solution-guide-securing-aws-zero-trust-access-to-s3-buckets-with-python-vpc-and-ziti-sdk\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/netfoundry.io\\\/resources\\\/solution-guide-securing-aws-zero-trust-access-to-s3-buckets-with-python-vpc-and-ziti-sdk\\\/#primaryimage\",\"url\":\"https:\\\/\\\/netfoundry.io\\\/wp-content\\\/uploads\\\/2024\\\/10\\\/solution-guide-securing-aws-zero-trust-access.jpg\",\"contentUrl\":\"https:\\\/\\\/netfoundry.io\\\/wp-content\\\/uploads\\\/2024\\\/10\\\/solution-guide-securing-aws-zero-trust-access.jpg\",\"width\":1536,\"height\":804,\"caption\":\"NetFoundry | Solution Guide: Securing AWS Zero Trust Access to S3 Buckets with Python, VPC, and Ziti SDK\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/netfoundry.io\\\/resources\\\/solution-guide-securing-aws-zero-trust-access-to-s3-buckets-with-python-vpc-and-ziti-sdk\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/netfoundry.io\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Resources\",\"item\":\"https:\\\/\\\/netfoundry.io\\\/resources\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Solution Guide: Securing AWS Zero Trust Access to S3 Buckets with Python, VPC, and Ziti SDK\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/netfoundry.io\\\/#website\",\"url\":\"https:\\\/\\\/netfoundry.io\\\/\",\"name\":\"NetFoundry\",\"description\":\"Identity-First\u2122 Networking\",\"publisher\":{\"@id\":\"https:\\\/\\\/netfoundry.io\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/netfoundry.io\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/netfoundry.io\\\/#organization\",\"name\":\"NetFoundry\",\"url\":\"https:\\\/\\\/netfoundry.io\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/netfoundry.io\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/netfoundry.io\\\/wp-content\\\/uploads\\\/2024\\\/08\\\/netfoundry-icon-color.png\",\"contentUrl\":\"https:\\\/\\\/netfoundry.io\\\/wp-content\\\/uploads\\\/2024\\\/08\\\/netfoundry-icon-color.png\",\"width\":512,\"height\":512,\"caption\":\"NetFoundry\"},\"image\":{\"@id\":\"https:\\\/\\\/netfoundry.io\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/netfoundry.io\",\"https:\\\/\\\/x.com\\\/netfoundry\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/netfoundry\\\/\",\"https:\\\/\\\/www.youtube.com\\\/channel\\\/UCGN6PFj1rZu50yme9YsICmg\",\"https:\\\/\\\/www.instagram.com\\\/netfoundry.io\"]}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Solution Guide: Securing AWS Zero Trust Access to S3 Buckets with Python, VPC, and Ziti SDK","description":"Learn how AWS Zero Trust principles enhance security by embedding zero trust connectivity, ensuring secure access and protection for modern cloud environments.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/netfoundry.io\/resources\/solution-guide-securing-aws-zero-trust-access-to-s3-buckets-with-python-vpc-and-ziti-sdk\/","og_locale":"en_US","og_type":"article","og_title":"Solution Guide: Securing AWS Zero Trust Access to S3 Buckets with Python, VPC, and Ziti SDK","og_description":"Learn how AWS Zero Trust principles enhance security by embedding zero trust connectivity, ensuring secure access and protection for modern cloud environments.","og_url":"https:\/\/netfoundry.io\/resources\/solution-guide-securing-aws-zero-trust-access-to-s3-buckets-with-python-vpc-and-ziti-sdk\/","og_site_name":"NetFoundry","article_publisher":"https:\/\/www.facebook.com\/netfoundry.io","article_modified_time":"2026-01-29T17:19:35+00:00","og_image":[{"width":1536,"height":804,"url":"https:\/\/netfoundry.io\/wp-content\/uploads\/2024\/10\/solution-guide-securing-aws-zero-trust-access.jpg","type":"image\/jpeg"}],"twitter_card":"summary_large_image","twitter_site":"@netfoundry","twitter_misc":{"Est. reading time":"13 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/netfoundry.io\/resources\/solution-guide-securing-aws-zero-trust-access-to-s3-buckets-with-python-vpc-and-ziti-sdk\/","url":"https:\/\/netfoundry.io\/resources\/solution-guide-securing-aws-zero-trust-access-to-s3-buckets-with-python-vpc-and-ziti-sdk\/","name":"Solution Guide: Securing AWS Zero Trust Access to S3 Buckets with Python, VPC, and Ziti SDK","isPartOf":{"@id":"https:\/\/netfoundry.io\/#website"},"primaryImageOfPage":{"@id":"https:\/\/netfoundry.io\/resources\/solution-guide-securing-aws-zero-trust-access-to-s3-buckets-with-python-vpc-and-ziti-sdk\/#primaryimage"},"image":{"@id":"https:\/\/netfoundry.io\/resources\/solution-guide-securing-aws-zero-trust-access-to-s3-buckets-with-python-vpc-and-ziti-sdk\/#primaryimage"},"thumbnailUrl":"https:\/\/netfoundry.io\/wp-content\/uploads\/2024\/10\/solution-guide-securing-aws-zero-trust-access.jpg","datePublished":"2024-10-18T13:49:04+00:00","dateModified":"2026-01-29T17:19:35+00:00","description":"Learn how AWS Zero Trust principles enhance security by embedding zero trust connectivity, ensuring secure access and protection for modern cloud environments.","breadcrumb":{"@id":"https:\/\/netfoundry.io\/resources\/solution-guide-securing-aws-zero-trust-access-to-s3-buckets-with-python-vpc-and-ziti-sdk\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/netfoundry.io\/resources\/solution-guide-securing-aws-zero-trust-access-to-s3-buckets-with-python-vpc-and-ziti-sdk\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/netfoundry.io\/resources\/solution-guide-securing-aws-zero-trust-access-to-s3-buckets-with-python-vpc-and-ziti-sdk\/#primaryimage","url":"https:\/\/netfoundry.io\/wp-content\/uploads\/2024\/10\/solution-guide-securing-aws-zero-trust-access.jpg","contentUrl":"https:\/\/netfoundry.io\/wp-content\/uploads\/2024\/10\/solution-guide-securing-aws-zero-trust-access.jpg","width":1536,"height":804,"caption":"NetFoundry | Solution Guide: Securing AWS Zero Trust Access to S3 Buckets with Python, VPC, and Ziti SDK"},{"@type":"BreadcrumbList","@id":"https:\/\/netfoundry.io\/resources\/solution-guide-securing-aws-zero-trust-access-to-s3-buckets-with-python-vpc-and-ziti-sdk\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/netfoundry.io\/"},{"@type":"ListItem","position":2,"name":"Resources","item":"https:\/\/netfoundry.io\/resources\/"},{"@type":"ListItem","position":3,"name":"Solution Guide: Securing AWS Zero Trust Access to S3 Buckets with Python, VPC, and Ziti SDK"}]},{"@type":"WebSite","@id":"https:\/\/netfoundry.io\/#website","url":"https:\/\/netfoundry.io\/","name":"NetFoundry","description":"Identity-First\u2122 Networking","publisher":{"@id":"https:\/\/netfoundry.io\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/netfoundry.io\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/netfoundry.io\/#organization","name":"NetFoundry","url":"https:\/\/netfoundry.io\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/netfoundry.io\/#\/schema\/logo\/image\/","url":"https:\/\/netfoundry.io\/wp-content\/uploads\/2024\/08\/netfoundry-icon-color.png","contentUrl":"https:\/\/netfoundry.io\/wp-content\/uploads\/2024\/08\/netfoundry-icon-color.png","width":512,"height":512,"caption":"NetFoundry"},"image":{"@id":"https:\/\/netfoundry.io\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/netfoundry.io","https:\/\/x.com\/netfoundry","https:\/\/www.linkedin.com\/company\/netfoundry\/","https:\/\/www.youtube.com\/channel\/UCGN6PFj1rZu50yme9YsICmg","https:\/\/www.instagram.com\/netfoundry.io"]}]}},"_links":{"self":[{"href":"https:\/\/netfoundry.io\/wp-json\/wp\/v2\/resources\/41579","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/netfoundry.io\/wp-json\/wp\/v2\/resources"}],"about":[{"href":"https:\/\/netfoundry.io\/wp-json\/wp\/v2\/types\/resources"}],"author":[{"embeddable":true,"href":"https:\/\/netfoundry.io\/wp-json\/wp\/v2\/users\/94"}],"version-history":[{"count":0,"href":"https:\/\/netfoundry.io\/wp-json\/wp\/v2\/resources\/41579\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/netfoundry.io\/wp-json\/wp\/v2\/media\/41581"}],"wp:attachment":[{"href":"https:\/\/netfoundry.io\/wp-json\/wp\/v2\/media?parent=41579"}],"wp:term":[{"taxonomy":"feature","embeddable":true,"href":"https:\/\/netfoundry.io\/wp-json\/wp\/v2\/feature?post=41579"},{"taxonomy":"resource-tags","embeddable":true,"href":"https:\/\/netfoundry.io\/wp-json\/wp\/v2\/resource-tags?post=41579"},{"taxonomy":"resource-categories","embeddable":true,"href":"https:\/\/netfoundry.io\/wp-json\/wp\/v2\/resource-categories?post=41579"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}