Step 1: Locate Your External ID

Locate your External ID in the Fivetran setup form for Braze.

Step 2: Create a Braze API Key For Amazon S3 Storage

Next, login to your dashboard here or with your designated dashboard URL and click Developer Console on the bottom left corner of the Braze dashboard.

From here, create an API Key for Fivetran and enable the following permissions for said key:

• users.export.ids
• users.export.segment
• email.unsubscribe
• email.hard_bounces
• messages.schedule_broadcasts
• campaigns.list
• campaigns.details
• canvas.list
• canvas.details
• segments.list
• segments.details
• purchases.product_list
• events.list
• feed.list
• feed.details
• templates.email.info
• templates.email.list
• subscription.status.get
• subscription.groups.get

Lastly, take note of the created API key before proceeding because it will be required in Step 4.

Step 3: Give Fivetran Access to a Specified S3 Bucket

Creating an IAM policy

Open the Amazon IAM Console and navigate to Policies->Create Policy as shown below.

Then, navigate to the JSON tab.

Copy the policy below, replacing {your-bucket-name} with the name of your s3 bucket:

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
{
"Version": "2012-10-17",
"Statement": [
    {
      "Effect": "Allow",
      "Action": [
"s3:Get*",
"s3:List*"
      ],
      "Resource": "arn:aws:s3:::{your-bucket-name}/*"
    },
    {
      "Effect": "Allow",
      "Action": [
"s3:Get*",
"s3:List*"
      ],
      "Resource": "arn:aws:s3:::{your-bucket-name}"
    }
  ]
}

Now, click the Review Policy button to make any final changes before setup.

Here, give the policy a unique name (something like “Fivetran-S3-Access”) and an optional description before clicking the Create Policy button.

Create an IAM role

Navigate to Roles, then select Create New Role.

Select Another AWS Account, then click the checkbox for Require external ID.

Here, enter the Fivetran account ID, 834469178297, and the External ID which was found in the Fivetran Braze S3 connection setup form during Step 1.

Click Next: Permissions, and now select the policy that you created earlier (ie, “Fivetran-S3-Access”).

Lastly, click Next: Review, name your new role (i.e., Fivetran), and click Create Role.

Locating the IAM Role ARN

Click on the role you just created, or navigate to Roles from your Amazon IAM Console.

Destination schema: Choose a unique schema name.

API URL: Your assigned API URL found during the Braze Currents setup process.

API Key: The API Key noted during the Braze Currents setup process.

External ID: Fixed value. Use this ID to setup IAM role in Step 3 of the Braze Currents setup process.

Bucket: Found within your Braze Dashboard by navigating to Integration > Currents > your-current-name.

Role ARN: See Step 3 of the Braze Currents setup process.