Accessing Freewheel v4 Log Files

Freewheel stores their v4 log files into an AWS S3 bucket. When you request access to the log files they will create a role for you giving your AWS account read-only access to the bucket where they store your log files. That role is granted only for your account - in order for us to be able to access their S3 bucket you need to create a role giving our AWS account permission to do so. You can either do this from the AWS console, or from the AWS cli. To streamline this operation we created an AWS CloudFormation template which will ask for your Freewheel Network ID and create the needed role for you.

To do this you need to be logged into your AWS account with a IAM user having enough rights to create roles (https://docs.aws.amazon.com/emr/latest/ManagementGuide/emr-iam-roles-create-permissions.html).

You can run the template in one of two ways:

Run using the AWS Console#

Clicking on the button below will take you to an AWS CloudFormation screen to create the required role:

WatchingThatFreewheelStack

Please enter your FreeWheel Network ID and tick the checkbox at the bottom with the acknowledgement. Click on the Create stack button at the bottom of the page to create the required role.

See the screenshot below where we marked the 2 places requiring your input:

CloudFormation example

Run using the AWS cli#

Alternatively you can run the following aws cli command:

aws cloudformation create-stack \
--stack-name WatchingThatFreewheelStack \
--template-url https://s3.eu-west-1.amazonaws.com/cdn.watchingthat.net/cf-freewheel-role.yaml \
--parameters ParameterKey=FWNetworkId,ParameterValue=*** \
--on-failure DELETE \
--capabilities CAPABILITY_NAMED_IAM

Make sure you replace *** in the command above with your FreeWheel Network ID.

The Cloud Formation template used is available for you to inspect, should you want to.

Let us know your AWS account ID & Freewheel Network ID#

To find your AWS account ID go to AWS Support Center (make sure you're logged in). The account id is shown in the left sidebar at the top as "Account number". Give the AWS account ID and the Freewheel Network ID to your Watching That contact.

Remove access for Watching That#

If you want to remove the rights granted above for Watching That:

  1. Go to the CloudFormation homepage.
  2. Tick the radio box next to the WatchingThatFreewheelStack item in the list and click the Delete button at the top.
  3. After a few moments the stack and the role (rights) you created above will be removed.

Alternatively you can do the same thing from the command line by running the following command:

aws cloudformation delete-stack --stack-name WatchingThatFreewheelStack

Costs#

There are no extra AWS costs for you. Neither for creating the role above, nor when we transfer the log files for processing.