Enabling or disabling live inventory tables

To enable or disable inventory tables

1. Sign in to the Amazon Web Services Management Console and open the Amazon S3 console at https://console.amazonaws.cn/s3/.

2. In the left navigation pane, choose General purpose buckets.

3. Choose the general purpose bucket with the metadata table configuration that you want to enable or disable an inventory table for.

4. On the bucket's details page, choose the Metadata tab.

5. On the Metadata tab, choose Edit, then choose Edit inventory table configuration.

6. On the Edit inventory table configuration page, choose Enabled or Disabled under Inventory table.

   Note

   Before you choose Enabled, make sure that you've reviewed and met the prerequisites.

   • If you chose Enabled, you can choose whether to encrypt your table with server-side encryption using Amazon Key Management Service (Amazon KMS) keys (SSE-KMS). By default, inventory tables are encrypted with server-side encryption using Amazon S3 managed keys (SSE-S3).

     If you choose to use SSE-KMS, you must provide a customer managed KMS key in the same Region as your general purpose bucket.

     Important

     You can set the encryption type for your metadata tables only during table creation. After an Amazon managed table is created, you can't change its encryption setting.

     • To encrypt your inventory table with SSE-S3 (the default), choose Don't specify encryption type.

     • To encrypt your inventory table with SSE-KMS, choose Specify encryption type. Under Encryption type, choose Server-side encryption using Amazon Key Management Service (Amazon KMS) keys (SSE-KMS). Under Amazon KMS key, either choose from your existing KMS keys, or enter your KMS key ARN. If you don't already have a KMS key, choose Enter KMS key ARN, and then choose Create a KMS key.

   • If you chose Disabled, under After the inventory table is disabled, the table will no longer be updated, and updates can't be resumed, select the checkbox.

7. Choose Save changes.

To enable or disable inventory tables by using the Amazon CLI

To use the following example commands, replace the user input placeholders with your own information.

1. Create a JSON file that contains your inventory table configuration, and save it (for example, inventory-config.json). The following is a sample configuration to enable a new inventory table.

   If you're enabling an inventory table, you can optionally specify an encryption configuration. By default, metadata tables are encrypted with server-side encryption using Amazon S3 managed keys (SSE-S3), which you can specify by setting SseAlgorithm to AES256.

   To encrypt your inventory table with server-side encryption using Amazon Key Management Service (Amazon KMS) keys (SSE-KMS), set SseAlgorithm to aws:kms. You must also set KmsKeyArn to the ARN of a customer managed KMS key in the same Region where your general purpose bucket is located.

   {
     "ConfigurationState": "ENABLED",
     "EncryptionConfiguration": {       
       "SseAlgorithm": "aws:kms",
       "KmsKeyArn": "arn:aws-cn:kms:us-east-2:account-id:key/key-id"
     }  
   }

   If you want to disable an existing inventory table, use the following configuration:

   {
     "ConfigurationState": "DISABLED"  }  
   }

2. Use the following command to update the inventory table configuration for your general purpose bucket (for example, amzn-s3-demo-bucket):

   aws s3api update-bucket-metadata-inventory-table-configuration \
   --bucket amzn-s3-demo-source-bucket \
   --inventory-table-configuration file://./inventory-config.json \
   --region us-east-2