Carbon Black Cloud: Adding S3 Bucket To Event Forwarder Fails With "Provide a valid bucket with appropriate permissions."

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)

Issue/Introduction

When trying to configure the Event Forwarder to send events to a AWS S3 bucket saving the configuration fails with "Provide a valid bucket with appropriate permissions." message

Environment

• Carbon Black Cloud: All Supported Versions

Cause

• This can occur if the S3 bucket is encrypted with AWS Key Management Service key (SSE-KMS)
• If Server-side encryption is enabled only Amazon S3 key (SSE-S3) is supported

Resolution

Change to SSE-S3 encryption if available