[Music]
hi I'm Dustin a cloud support engineer
at the Dallas AWS office customers
sometimes ask me why at the file share
that they've created to go with their
file gateway a stuck in creating I tell
them there are a few different reasons
why this might be for example the file
gateway will need access to upload data
into the s3 bucket it gets this access
from I enrolled that has attached the
share at creation without these
permissions operations will fail
additionally the Storage Gateway service
must be allowed to assume the I am role
this can be prevented if the trust
policy for the role is not allowing the
Storage Gateway service to assume it or
if the STS service is disabled for the
region in which the file gateway is
being created another issue that might
come up is if there is an error in the
bucket name during creation of the file
share in this video we'll walk through
the steps for creating a file share with
the proper access and we'll also go over
how to confirm that STS is enabled let's
get started ok so first let's sign in to
the AWS management console in my case
I've already done this so I'm going to
go ahead and go to Storage Gateway so
let's go to services and then let's
select Storage Gateway from here we'll
want to select the file shares and then
we're gonna select the share that's
stuck in creating we're gonna go to
actions and then delete file share we're
gonna confirm that we want to do this
we're gonna select delete as the share
is deleted now let's go ahead and make
sure STS is enabled and that the role
has the correct permissions first let's
verify that STS is enabled this step
requires that the user has access to
perform STS actions this can be granted
by using the I M star permission let's
go ahead and open up the IM console from
the services page so let's select
services let's go to I am from here
we're going to select account settings
and then we're going to scroll down to
the security token service regions what
we're checking for here is to confirm
that they're all active specifically the
one in the region that we're trying to
create the file share in my case I'm
active in all of these but as a quick
test I'll deactivate and activate one to
show you what it looks like
we can see here that it's now inactive
if I attempted to assume a role in the
North California region it would fail
because this service isn't enabled I'm
going to go and activate it now that
we've confirmed that STS is enabled
let's go back to the storage gateway
console we can do this from the services
tab and then storage gateway from here
let's select file shares on the left
let's go to create a file share we're
going to choose the gateway in this case
I only have one so we're just going to
select this one I also have a bucket
name already prepared so we're going to
use that and we'll leave these as the
default specifically I want to create a
new I am role because I'll ensure that
we have the right permissions to work
with the s3 bucket we're going to choose
next from here you can want to change
the allowed clients mount options and
file metadata defaults to match your use
case in case I'm just going to leave
these as default let's go ahead and
create file share sometimes this process
can take two or three minutes to
complete ok from here we can see that
the share is now available and ready to
be mounted example mount commands are
included in the details tab after a file
share is selected in the console I can
see these here at the bottom here for
Linux Windows and Mac OS thanks for
watching and happy cloud computing from
all of us here at AWS
[Music]
you
[Music]