From 2ca3862acff052857f8edc7e324296fb3978be6a Mon Sep 17 00:00:00 2001 From: Dan Heath <76443935+Dan-Heath@users.noreply.github.com> Date: Mon, 29 Apr 2024 21:08:54 +0000 Subject: [PATCH] backport of commit e8e5a25e0adcc05b6d458f42490813fe22ab5f88 --- .../session-recording/create-storage-bucket.mdx | 13 +++++++++++-- .../session-recording/enable-session-recording.mdx | 2 +- 2 files changed, 12 insertions(+), 3 deletions(-) diff --git a/website/content/docs/configuration/session-recording/create-storage-bucket.mdx b/website/content/docs/configuration/session-recording/create-storage-bucket.mdx index 8ddfc3f116..e8e7c717b5 100644 --- a/website/content/docs/configuration/session-recording/create-storage-bucket.mdx +++ b/website/content/docs/configuration/session-recording/create-storage-bucket.mdx @@ -17,7 +17,16 @@ A storage bucket can only belong to the global scope or an org scope. A storage For more information about using session recording to audit user sessions, refer to [Auditing](/boundary/docs/concepts/auditing). -### Create a storage bucket +## Requirements + +Before you create a storage bucket in Boundary, you must: + +- [Configure workers for storage](/boundary/docs/configuration/session-recording/configure-worker-storage) +- Configure one of the following storage providers: + - [Amazon S3](/boundary/docs/configuration/session-recording/storage-providers/configure-s3) + - [MinIO](/boundary/docs/configuration/session-recording/storage-providers/configure-minio) + +## Create a storage bucket Select a storage provider. @@ -224,7 +233,7 @@ Complete the following steps to create a storage bucket in Boundary. - `endpoint_url` (Required): Fully-qualified endpoint pointing to a MinIO S3 API. - `region`: (Optional) The region to configure the storage bucket for. - `disable_credential_rotation`: (Optional) Controls whether the plugin will rotate the incoming credentials and manage a new MinIO service account. If this attribute is set to `false`, or not provided, the plugin will rotate the incoming credentials to create a new MinIO service account, then delete the incoming credentials. - + This option must be set to `true` if you use dynamic credentials. diff --git a/website/content/docs/configuration/session-recording/enable-session-recording.mdx b/website/content/docs/configuration/session-recording/enable-session-recording.mdx index bc9760662f..231271cd2f 100644 --- a/website/content/docs/configuration/session-recording/enable-session-recording.mdx +++ b/website/content/docs/configuration/session-recording/enable-session-recording.mdx @@ -13,7 +13,7 @@ You must enable session recording for any targets that you want to record sessio When you [create a storage bucket](/boundary/docs/configuration/session-recording/create-storage-bucket), Boundary provides you with an ID. You use the storage bucket's ID to associate a target with the storage bucket. -**Requirements**: +## Requirements - One or more storage buckets to store the recordings. - Session recording is only supported for SSH targets at this time.