Introduction

The instructions here are intended for use by admins in AWS. You need the ability to create cross account roles in AWS and must be an admin of the workspace you are integrating in Labelbox.

This document will walk you through the process of integrating Labelbox to use a S3 bucket from an AWS account you control as the source of data. The steps below will link to Labelbox documentation that should be referenced throughout this process.

Open new integration in Labelbox

• Start by logging into Labelbox and creating a new IAM Integration.
• Log into Labelbox, go to Account > Integrations, and click New Integration. Copy the Labelbox account ID and external ID. Leave this open as you will come back to it later.

Create a role for Labelbox in AWS

• Next, you’ll need to create a role for Labelbox in AWS account, specify permissions, and select a bucket. Follow the steps below to set this up in AWS account.
• Go to AWS account and set up CORS headers, permissions policy, and role Detailed steps can be found in Labelbox Implementation Documentation for configuring the CORS headers here and the IAM policy needed for the cross account role here

:exclamation: An example implementation by the ACE Infra team in terraform can be found here

Complete integration setup in Labelbox

• Add the Role ARN to the new integration you opened in Labelbox in step 1.
• Go back to the Integrations tab in Labelbox and paste the AWS Role ARN in the provided field. Then, name the integration.

Validate the integration

Next, you’ll need to make sure the validation was set up correctly. If you completed Parts 1 & 3 via the Labelbox UI, Labelbox will automatically run a validation check on the integration setup for you.

• You can check by going to the Integrations tab and checking the Last checked column indicates whether the integration was successful.
• If the integration failed, click on the refresh icon to view the error messages.

Upload data

Delegated Access for AWS supports “virtual-hosted-style” URLs; they follow this format: https://.s3..amazonaws.com/Upload data