Home > Information Management > Information Lifecycle > Manage Rules > Configure Storage Settings
Download this articleIf you are about to use your own storage locations, AvePoint recommends creating storage locations in the same data center as your AvePoint Online Services tenant for optimal performance, as data transfer between different data centers can lead to increased costs and reduced efficiency.
If you are using or plan to use your own storage device, read the instructions in the Allow AvePoint Agent Servers to Access Your Storage Account section below.
In the Create a new storage location panel, configure the following settings and click Create to create the storage location.
Name – Enter a name for this storage location.
Description – Provide a brief description.
Storage type – Select a storage type:
Amazon S3
Amazon S3-Compatible Storage
Dropbox
FTP
Google Cloud Storage
Microsoft Azure Blob Storage
SFTP
Storage configuration – Refer to the sections below to complete the detailed settings for the storage type you selected above.
Configure the following settings:
It is not recommended to activate the archive access tier if you are using S3 Intelligent-Tiering. Activating the archive access tier will cause data object files that have not yet been accessed for 90 days to be archived, and we cannot access the archived data in your Amazon S3 storage.
Bucket name – Enter the bucket name you wish to access.
Note the following:
The entered name must match an existing bucket. If no bucket is available, refer to Creating a bucket to create one.
For optimal compatibility, Amazon recommends that you avoid using periods (.) in bucket names. For naming guidelines, refer to General purpose bucket naming rules.
Ensure the bucket policy in Amazon S3 storage applied to your account contains the following required permissions:
Read: Get Object
List: ListBucket
Write: DeleteObject; PutObject; DeleteObjectVersion
Access key ID – Enter the corresponding access key ID to access the specified bucket. You can view the Access key ID from your AWS account.
Secret access key – Enter the corresponding secret key ID to access the specified bucket. You can view the Secret access key from your AWS account.
Storage region – Select the storage region of this bucket from the drop-down list.
Advanced – Enter the following extended parameters in the text box if necessary. If you have multiple parameters to enter, press Enter on your keyboard to separate the parameters.
Refer to the instructions below to add parameters:
RetryInterval – Customize the retry interval when the network connection is interrupted. Enter any positive integer between 0 and 2147483646 (the unit is millisecond). For example, RetryInterval=30000 means that it will attempt to reconnect every 30000 milliseconds.
If you do not configure this parameter, the value is 30000 milliseconds by default.
RetryCount – Customize the reconnection times after the network connection is interrupted. Enter any positive integer between 0 and 2147483646. For example, RetryCount=6 represents when the network connection is interrupted, it can reconnect at most 6 times.
If you do not configure this parameter, the value is 6 by default.
enablessl=true – Configure to enable SSL for the backups stored on this physical device.
CustomizedRegion – Configure the customized region of the physical device. For example, enter CustomizedRegion=s3-us-gov-west-1.amazonaws.com to configure the GovCloud account.
Configure the following settings:
Bucket name – Enter the bucket name you wish to access.
Note the following:
The entered name must match an existing bucket. If no bucket is available, refer to Creating a bucket to create one.
For optimal compatibility, Amazon recommends that you avoid using periods (.) in bucket names. For naming guidelines, refer to General purpose bucket naming rules.
Ensure the bucket policy in Amazon S3-Compatible Storage applied to your account contains the following required permissions:
Read: Get Object
List: ListBucket
Write: DeleteObject; PutObject; DeleteObjectVersion
Access key ID – Enter the corresponding access key ID to access the specified bucket.
Secret access key – Enter the corresponding secret key ID to access the specified bucket.
Endpoint – Enter the URL used to connect to the place where you want to store the data.
The URL must begin with “http://” or “https://”.
Advanced – Enter the following extended parameters in the text box if necessary. If you have multiple parameters to enter, press Enter on your keyboard to separate the parameters.
Refer to the instructions below to add parameters:
RetryInterval – Customize the retry interval when the network connection is interrupted. Enter any positive integer between 0 and 2147483646 (the unit is millisecond). For example, RetryInterval=30000 means that it will attempt to reconnect every 30000 milliseconds.
If you do not configure this parameter, the value is 30000 milliseconds by default.
RetryCount – Customize the reconnection times after the network connection is interrupted. Enter any positive integer between 0 and 2147483646. For example, RetryCount=6 represents when the network connection is interrupted, it can reconnect at most 6 times.
If you do not configure this parameter, the value is 6 by default.
Complete the following settings:
Root folder name – Enter a name for the root folder, which will be created in Dropbox and used to store the data.
Token secret – Click Retrieve token. Enter the email address and the password of the Dropbox account in the pop-up window to log into Dropbox, and then the token will appear in this pop-up window. Enter the token that appeared in the Token secret text box.
Advanced – Enter the following extended parameters in the text box if necessary. If you have multiple parameters to enter, press Enter on your keyboard to separate the parameters.
Refer to the instructions below to add parameters:
RetryInterval – Customize the retry interval when the network connection is interrupted. You are allowed to enter any positive integer between 0 and 2147483646 (the unit is in milliseconds). For example, RetryInterval=30000 means that it will attempt to reconnect every 30000 milliseconds.
If you do not configure this parameter, the value is 30000 milliseconds by default.
RetryCount – Customize the reconnection times after the network connection is interrupted. You are allowed to enter any positive integer between 0 and 2147483646. For example, RetryCount=10 represents when the network connection is interrupted, it can reconnect at most 10 times.
If you do not configure this parameter, the value is 6 by default.
Complete the following settings:
Host – Enter the IP address of the FTP server.
Port – Enter the port to use to connect to this FTP server.
Folder – Enter the folder where exported data will be stored on the FTP server.
Username – Enter the username to use to connect to this FTP server.
Password – Enter the password of the specified username.
Advanced – Enter the following extended parameters in the text box if necessary. If you have multiple parameters to enter, press Enter on the keyboard to separate the parameters.
Refer to the instructions below to add parameters:
RetryInterval – Customize the retry interval when the network connection is interrupted. You are allowed to enter any positive integer between 0 and 2147483646 (the unit is second). For example, RetryInterval=30 means that it will attempt to reconnect every 30 seconds.
If you do not configure this parameter, the value is 30 seconds by default.
RetryCount – Customize the reconnection times after the network connection is interrupted. You are allowed to enter any positive integer between 0 and 2147483646. For example, RetryCount=60 represents when the network connection is interrupted, it can reconnect at most 60 times.
If you do not configure this parameter, the value is 6 by default.
IsRetry – If you want to try again when Cloud Management failed to write the data in the physical device.
If you enter IsRetry=true, it will try again when it failed to write the data in the physical device.
If you enter IsRetry=false, it will not try again when it failed to write the data in the physical device.
Complete the following settings:
Service account email – Enter the email address of a service account that has the permission to access your bucket.
Private key – Enter a private key that is associated with the service account.
Project ID – Enter the ID of a project that is associated with your bucket.
Bucket name – Enter a bucket name.
Advanced – Enter the following extended parameters in the text box if necessary. If you have multiple parameters to enter, press Enter on your keyboard to separate the parameters.
Projection – Customize the projections that can be specified as options in various operations. You can set this value to Full if you want to include all properties, or set this value to NoAcl if you want to omit the ACL (Access Control List) property.
PredefinedAcl – Customize a pre-defined ACL of the bucket for simple access control scenarios. The following values are available for this parameter:
AuthenticatedRead – This value represents that the object owner gets owner access and all authenticated users get reader access.
Private – This value represents that the object owner gets owner access.
ProjectPrivate – This value represents that the object owner gets owner access, and project team members get access according to their roles.
PublicRead – This value represents that the object owner gets owner access, and all users get reader access.
PublicReadWrite – This value represents that the object owner gets owner access, and all users get writer access.
PredefinedDefaultObjectAcl – Customize predefined access control lists (ACLs) that can be specified when creating or updating objects. The following values are available for this parameter:
AuthenticatedRead – This value represents that the object owner gets owner access and all authenticated users get reader access.
BucketOwnerFullControl – This value represents that the object owner gets owner access and all authenticated users get reader access.
BucketOwnerRead – This value represents that the object owner gets owner access and project team owners get reader access.
Private – This value represents that the object owner gets owner access.
ProjectPrivate – This value represents that the object owner gets owner access and project team members get access according to their roles.
PublicRead – This value represents that the object owner gets owner access and all users get reader access.
Prefix – Set this value to the string which the bucket name starts with.
Complete the following settings:
Access point – Enter the URL for the Blob Storage Service. The default URL is http://blob.core.windows.net.
Container name – Enter the container name you wish to access.
Account name – Enter the corresponding account name to access the specified container.
Account key – Enter the corresponding account key to access the specified container.
Advanced – Enter the following extended parameters in the text box if necessary. If you have multiple parameters to enter, press Enter on your keyboard to separate the parameters.
Refer to the instructions below to add parameters:
RetryInterval – Customize the retry interval when the network connection is interrupted. You are allowed to enter any positive integer between 0 and 2147483646 (the unit is millisecond). For example, RetryInterval=30000 means that it will attempt to reconnect every 30000 milliseconds.
If you do not configure this parameter, the value is 30000 milliseconds by default.
RetryCount – Customize the reconnection times after the network connection is interrupted. You are allowed to enter any positive integer between 0 and 2147483646. For example, RetryCount=10 represents when the network connection is interrupted, it can reconnect at most 10 times.
If you do not configure this parameter, the value is 6 by default.
Complete the following settings:
Host – Enter the IP address or host name of the SFTP server.
Port – Enter the port of the SFTP server.
Root folder – Enter the folder where exported data will be stored on the SFTP server.
Username – Enter the username of the account that can use SFTP.
Password – Enter the corresponding password of the user used to access the root folder.
The password is the highest priority. If the password is not provided, the system will check the private key and private key password.
Private key file – If the SFTP server supports the private key file, click Browse to upload a private key file.
Private key password – Enter the corresponding password of the uploaded private key file.
Advanced – Enter the following extended parameters in the text box if necessary. If you have multiple parameters to enter, press Enter on the keyboard to separate the parameters.
Refer to the instructions below to add parameters:
RetryInterval – Customize the retry interval when the network connection is interrupted. Enter any positive integer between 0 and 2147483646 (the unit is millisecond). For example, RetryInterval=30000 means that it will attempt to reconnect every 30000 milliseconds.
If you do not configure this parameter, the value is 30000 milliseconds by default.
RetryCount – Customize the reconnection times after the network connection is interrupted. Enter any positive integer between 0 and 2147483646. For example, RetryCount=6 represents when the network connection is interrupted, it can reconnect at most 6 times.
If you do not configure this parameter, the value is 6 by default.
If you are using or plan to use your own storage device, read the instructions in this section carefully and complete the settings as needed. Otherwise, you can skip this topic.
When you are using your own storage device, you may have set up the storage firewall to only allow trusted clients for security concerns. To ensure that the Confidence Platform for Google can access your storage, complete the settings as required in the following conditions:
If you are using Microsoft Azure storage, refer to the following:
If your storage account is in the same data center as the one you use to sign up for AvePoint Online Services or your storage account is in its paired region, you must add the Azure Resource Manager (ARM) vNet subnets where the AvePoint agents are running on to your storage networking.
You can find additional details in this Microsoft article: Grant access from a virtual network, and get the subnet ID of the Confidence Platform for Google for your data center from Download ARM Vnet IDs. For detailed instructions on adding ARM virtual networks, please contact AvePoint Support for assistance.
Other than the condition above, you need to add the reserved IP addresses to the Azure storage firewall.
For detailed instructions, refer to Download a List of Reserved IP Addresses and Add Reserved IP Addresses.
If you are using a storage type other than Microsoft Azure storage and Amazon S3, you must add the reserved IP addresses to your storage firewall.
For detailed instructions, refer to Download a List of Reserved IP Addresses and Add Reserved IP Addresses.