ℹ️ The ingestion methods available vary based on the LinkSquares products and services purchased by you. For a list of supported third-party cloud-based storage application ingestion methods available for your account, reach out to your Account Team.
Overview
LinkSquares Analyze integrates with several existing systems to automatically ingest contracts and increase your team's efficiency. Analyze currently integrates with Box, Dropbox, Google Drive, SharePoint, Egnyte, and more.
Note: The Amazon S3 integration supports pulling in agreements via inbound syncs.
Process
Step 1. Getting Started
If you discussed syncs during or after your onboarding, please contact the appropriate team to request the implementation email from team@linksquares.com and proceed with setting up your sync.
Note:
Onboarding: Implementation Consultant
Post Onboarding: support@linksquares.com
Once the user has received the implementation email:
Click on the CLICK TO AUTHORIZE ACCESS button.
This will open a new tab on your browser.
Step 2. Service Selection
Within the new tab, click the Select Folder button.
You will be prompted to select the service that you wish to sync with.
Click Authorize to select Amazon S3 from the list of services.
After clicking Authorize, transition over to AWS for the next steps.
Step 3. AWS IAM Role ARN
Follow these steps to retrieve the Role ARN required for the connection setup. Remember to use the LinkSquares-generated external ID found on the connection page.
1. Navigate to My Security Credentials within your AWS account.
2. Next, select Roles > Create role.
3. Select Another AWS account.
Input Workato's Amazon S3 Account ID:
353360065216
4. Select Require External ID and provide the LinkSquares-generated Workato External ID. Every Workato-generated user will have a unique External ID (e.g., workato-user-84762).
Note: You will need a LinkSquares external ID that is generated when the new sync is created.
This can be obtained by clicking on the Click to Authorize link in the generated email, and selecting the Authorize to Sync button with your Amazon S3 account on the page that is opened.
5. Select proper permissions for LinkSquares cloud sync to run automation in your Amazon S3 bucket. At the minimum, it should have list/read/write access to specific buckets or folders. In this tutorial, we will select AmazonS3FullAccess.
LinkSquares recommends granting only the required permissions and avoiding using AmazonS3AllAccess whenever possible.
6. Optional: If you are using object taggings, select an appropriate tag for this IAM role.
7. Give this IAM Role an appropriate name and description.
LinkSquares recommends that the role name avoids using a guessable resource ID and that it does not include the external ID.
8. The IAM Role has been created. Select the role.
9. Copy the Role ARN. You will need to use this in the connection setup when creating an Amazon S3 connection in LinkSquares cloud sync.
While we still have the ability to utilize an Access Key type authorization for S3 buckets, the method is deprecated. The preferred method is an IAM role.
By provisioning a dedicated IAM profile, the owner of the S3 instance can grant LinkSquares cloud sync access via Workato to AWS resources without sharing AWS security credentials. It also helps to maintain permission boundaries, including controlled access to specific AWS folders and actions that are permitted by the third-party application.
Again, LinkSquares recommends granting only the required permissions and avoiding using AmazonS3AllAccess whenever possible.
Step 4: Set up New Sync via the Emailed Link
Once you have the client ID and client secret saved somewhere, you can now create a connection to your Sharepoint Online environment.
-
Click on the Click to Authorize Access button in the email received with the subject "Request Access for sync." This will open a new tab/browser window.
-
Select IAM Role for Authorization type.
-
Use the Role ARN from step nine for the IAM Role ARN field.
-
Use the name of your AWS S3 bucket for the Restrict to bucket field.
-
Use the region from the AWS S3 bucket URL. The region is typically in the S3 account URL (e.g., for https://eu-west-1.console.s3.amazon.com, use eu-west-1 as the region).
-
For testing purposes, one download thread is appropriate, unless testing bulk initial uploads.
-
Select Connect. The connection should be established in LinkSquares.
Step 5: Upload
When the Amazon S3 integration is fully configured, LinkSquares will begin transferring files from S3 to your LinkSquares account. This can be set to continuous ingestion of files.
Note: If the person who established the sync leaves the organization, the sync between your existing repository and LinkSquares will be broken. Contact support@linksquares.com to re-establish the sync.