Amazon S3

​

Part 1: Create a new integration in Labelbox

1. Navigate to Settings > Integrations.
2. Under Add integrations, select Sync from a source.
3. Select AWS.
4. Copy the Labelbox AWS account ID and External ID.
5. Leave this Create AWS integration page open as you will come back to it later.

​

Part 2: Create a role for Labelbox in AWS

1. Go to your AWS account and set up CORS for your bucket. CORS allows Labelbox to request resources from your cloud storage. See Create CORS headers to learn how to set up CORS for your bucket.
2. In your AWS account, create a permission policy for your bucket. If you already have a permission policy you plan to use, proceed to step 7. If you don’t have a permission policy yet:
   1. Navigate to the IAM Management Console > Policies page
   2. Click Create policy
   3. Select JSON policy editor and enter your policy. The following example policy restricts access to a specific S3 bucket.
   JSON

   Copy

   Ask AI

   {
       "Version": "2012-10-17",
       "Statement": [
           {
               "Effect": "Allow",
               "Action": [
                   "s3:GetObject",
                   "s3:ListBucket",
                   "s3:GetBucketLocation"
               ],
               "Resource": [
                   "arn:aws:s3:::CustomerBucketARN/*",
                   "arn:aws:s3:::CustomerBucketARN"
               ]
           }
       ]
   }
   

   Element	Description
   Effect	Specifies that the elements included in the statement are allowed.
   Action	Describes the specific action(s) that will be allowed. Setting this to s3:GetObject gives Labelbox read-only access to the bucket you specify. See IAM JSON policy elements: Action to learn more.
   Resource	Specifies the object(s) that the statement covers. This is where you specify your Bucket ARN. To find your Bucket ARN, go to your s3 console, select the bucket from the list, go to the Properties tab, and copy the Amazon Resource Name (ARN). The * at the end of the example ARN above is a wildcard character. See IAM JSON policy elements: Resource to learn more.

3. Click Next to move to the Review and create step.
4. Add a name and an optional description for the added policy. Use a meaningful name to identify the policy, such as LabelboxReadAccess.
5. When you finish reviewing, click Create policy.
6. From the Roles page: a. Click Create role. b. Select Custom trust policy and enter the following policy:
   Custom

   Copy

   Ask AI

   {
     "Version": "2012-10-17",
     "Statement": [
       {
         "Effect": "Allow",
         "Principal": {
           "AWS": "arn:aws:iam::340636424752:role/lb-aws-delegated-access-role"
         },
         "Action": "sts:AssumeRole",
         "Condition": {
           "StringEquals": {
             "sts:ExternalId": "" // Enter the external ID obtained from Part 1
           }
         }
       }
     ]
   }
   

   c. Click Next to move to the Add Permissions step.
7. In the Permissions policies section, check the box next to the permission policy you created to attach it to your role or select a policy in the list provided, such as AmazonS3ReadOnlyAccess.
8. Click Next to move to the Name, review, and create step.
9. Add a name and an optional description for the added policy. Use a meaningful name to identify the policy, such as LabelboxS3Access.
10. When you finish reviewing, click Create role.
11. Click on the role you just created and copy the Role ARN on the Summary tab.

​

Part 3: Complete integration setup in Labelbox

• Set the integration name
• Enter the AWS bucket name
• Paste the AWS Role ARN

​

Part 4: Validate the integration

​

Part 5: Create & upload the dataset

​

Part 6: Validate the dataset