Requirements

Working with Firewalls

The following URLs and access types need outgoing permissions in firewalls in order for Hosted Mender to work correctly:

Mender access: Devices, APIs and browser access

• https://mender.example.com - Use the same address you specify it in the Server Installation Section

Artifact storage access: Devices, APIs and browser access

Amazon S3 IAM policies

A minimum policy set to use an Amazon S3 bucket to store Mender Artifacts is:

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Action": [
                "s3:GetAccessPoint",
                "s3:ListAllMyBuckets"
            ],
            "Effect": "Allow",
            "Resource": "*"
        },
        {
            "Action": [
                "s3:*"
            ],
            "Effect": "Allow",
            "Resource": "arn:aws:s3:::BUCKET-NAME"
        },
        {
            "Action": [
                "s3:*"
            ],
            "Effect": "Allow",
            "Resource": "arn:aws:s3:::BUCKET-NAME/*"
        },
    ]
}