> ## Documentation Index
> Fetch the complete documentation index at: https://docs.tight.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Amazon S3 Data Lake

Many FinTechs, financial institutions and other platforms have built (or are building) bespoke analytics/reporting solutions for various proprietary use cases. If your enterprise likes to leverage large analytical data, the Tight API has you covered via its [Data Lakes](/v5.0/products/data-lakes) product.

The instructions below explain how to set up your Amazon S3 bucket as a Tight API Data Lake.

## 1. Create a bucket

The first step to configuring your Tight API data lake is to [create an Amazon S3 bucket](https://docs.aws.amazon.com/AmazonS3/latest/userguide/create-bucket-overview.html) to store Tight API data. You can name this bucket anything you'd like; "hurdlr-api-data" is used for the examples shown below.

<img src="https://mintcdn.com/tight-7c882d74/Wf-_-tBNZrYWdgZf/v5.0/images/93ef035-Screen_Shot_2022-07-14_at_3.15.27_PM.png?fit=max&auto=format&n=Wf-_-tBNZrYWdgZf&q=85&s=602bcf19cf155f9167118a4782c202ac" alt="" width="1908" height="1832" data-path="v5.0/images/93ef035-Screen_Shot_2022-07-14_at_3.15.27_PM.png" />

Please note down the "AWS Region" that you selected.

## 2. Configure a policy for programmatic access to the bucket

Next, you'll need to [create an IAM policy](https://aws.amazon.com/blogs/security/writing-iam-policies-how-to-grant-access-to-an-amazon-s3-bucket/) to grant programmatic access to the Amazon S3 bucket that we created above.

The first step on the "Create policy" flow will give you the option to use the Visual Editor or JSON. You should select the JSON option, and then paste the following JSON in there:

```json theme={null}
{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": [
                "s3:ListBucket"
            ],
            "Resource": [
                "arn:aws:s3:::hurdlr-api-data"
            ]
        },
        {
            "Effect": "Allow",
            "Action": [
                "s3:PutObject",
                "s3:GetObject",
                "s3:DeleteObject"
            ],
            "Resource": [
                "arn:aws:s3:::hurdlr-api-data/*"
            ]
        }
    ]
}
```

<img src="https://mintcdn.com/tight-7c882d74/Wf-_-tBNZrYWdgZf/v5.0/images/550762f-Screen_Shot_2022-07-14_at_3.21.29_PM.png?fit=max&auto=format&n=Wf-_-tBNZrYWdgZf&q=85&s=4ca1670e6ac9fb35878ed9a544aa3776" alt="" width="1916" height="1800" data-path="v5.0/images/550762f-Screen_Shot_2022-07-14_at_3.21.29_PM.png" />

The second step of the "Create policy" flow simply entails clicking "Next: Review":

<img src="https://mintcdn.com/tight-7c882d74/Wf-_-tBNZrYWdgZf/v5.0/images/d8e241b-Screen_Shot_2022-07-14_at_3.26.51_PM.png?fit=max&auto=format&n=Wf-_-tBNZrYWdgZf&q=85&s=3da8f489d03ed98847f2bd0823af1666" alt="" width="1908" height="1800" data-path="v5.0/images/d8e241b-Screen_Shot_2022-07-14_at_3.26.51_PM.png" />

The third step of the "Create policy" flow will require you to input a `Name` and `Description`. We recommend setting the `Name` to "hurdlr-api-data-access".

<img src="https://mintcdn.com/tight-7c882d74/PBb8Gf8jW9PRt_Fg/v5.0/images/01d9a7d-Screen_Shot_2022-07-14_at_3.26.36_PM.png?fit=max&auto=format&n=PBb8Gf8jW9PRt_Fg&q=85&s=efd8cff6aa2d342c332eca463fb223ab" alt="" width="1908" height="1798" data-path="v5.0/images/01d9a7d-Screen_Shot_2022-07-14_at_3.26.36_PM.png" />

Simply click "Create policy" and then you're done with this step.

## 3. Add an IAM user using the new policy

Next, you'll need to [add an IAM user](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_users_create.html#id_users_create_console) using the new policy created in the prior step.

The first step on the "Add user" flow will ask you to input a `User name`, for which we recommend using "hurdlr-api-data-user".

<img src="https://mintcdn.com/tight-7c882d74/PBb8Gf8jW9PRt_Fg/v5.0/images/4da7cf4-Screen_Shot_2022-07-14_at_3.36.17_PM.png?fit=max&auto=format&n=PBb8Gf8jW9PRt_Fg&q=85&s=bfeb00e898cc3655d90b5e7fbee389d1" alt="" width="1902" height="1802" data-path="v5.0/images/4da7cf4-Screen_Shot_2022-07-14_at_3.36.17_PM.png" />

The second step on the "Add user" flow give you a few options to set permissions. Select the "Attach existing policies directly" option. Then, simply search for "hurdlr-api-data-access" and select that:

<img src="https://mintcdn.com/tight-7c882d74/Wf-_-tBNZrYWdgZf/v5.0/images/5d677bd-Screen_Shot_2022-07-14_at_3.37.12_PM.png?fit=max&auto=format&n=Wf-_-tBNZrYWdgZf&q=85&s=62befa618baefb1681317d78c2871a54" alt="" width="1906" height="1798" data-path="v5.0/images/5d677bd-Screen_Shot_2022-07-14_at_3.37.12_PM.png" />

The third step of the "Add user" flow simply entails clicking "Next: Review":

<img src="https://mintcdn.com/tight-7c882d74/Wf-_-tBNZrYWdgZf/v5.0/images/6beda2e-Screen_Shot_2022-07-14_at_3.37.28_PM.png?fit=max&auto=format&n=Wf-_-tBNZrYWdgZf&q=85&s=6ae949ef62679e4df2eeda5ff1f7ee9a" alt="" width="1908" height="1800" data-path="v5.0/images/6beda2e-Screen_Shot_2022-07-14_at_3.37.28_PM.png" />

On the "Review" step, you can simply click "Create user":

<img src="https://mintcdn.com/tight-7c882d74/Wf-_-tBNZrYWdgZf/v5.0/images/b62f37b-Screen_Shot_2022-07-14_at_3.37.47_PM.png?fit=max&auto=format&n=Wf-_-tBNZrYWdgZf&q=85&s=9ceebd87345b03b159a1dee2ff793ed7" alt="" width="1908" height="1802" data-path="v5.0/images/b62f37b-Screen_Shot_2022-07-14_at_3.37.47_PM.png" />

On the final step of the "Add user" flow, you'll see the option to "Download .csv", which you will want to do:

<img src="https://mintcdn.com/tight-7c882d74/PBb8Gf8jW9PRt_Fg/v5.0/images/13e9e93-Screen_Shot_2022-07-14_at_3.38.20_PM.png?fit=max&auto=format&n=PBb8Gf8jW9PRt_Fg&q=85&s=ffd7974752bd20a787ec50b814c4ce55" alt="" width="1904" height="1802" data-path="v5.0/images/13e9e93-Screen_Shot_2022-07-14_at_3.38.20_PM.png" />

## 4. Securely share access with Tight

Contact us directly at [api@tight.com](mailto:api@tight.com) for instructions on how to securely share:

A. the CSV that you generated at the end of [Step 3](/v5.0/products/data-lakes/amazon-s3#3-add-an-iam-user-using-the-new-policy)\
B. the AWS region from [Step 1](/v5.0/products/data-lakes/amazon-s3#1-create-a-bucket)
