{match[5]});
} else if (match[6]) {
parts.push({match[7]});
} else if (match[8]) {
parts.push({match[9]});
}
lastIndex = match.index + match[0].length;
}
if (lastIndex < text.length) parts.push(text.slice(lastIndex));
if (parts.length === 0) return text;
const keyRef = {
current: keyIndex
};
return expandHtmlTags(parts, keyRef);
};
const processBadges = text => {
if (!text || typeof text !== 'string') return text;
if (YES_RE.test(text)) return ✓;
if (NO_RE.test(text)) return ✗;
if (LIMITED_RE.test(text)) return ◐;
return processText(text);
};
const expandSimpleTags = (str, keyRef) => {
const result = [];
let last = 0;
SIMPLE_TAG_RE.lastIndex = 0;
let m;
while ((m = SIMPLE_TAG_RE.exec(str)) !== null) {
if (m.index > last) result.push(str.slice(last, m.index));
if (m[1]) {
result.push(); } else if (m[2]) { result.push(
,
); } else if (m[3]) { result.push(Note: ); } else if (m[4]) { result.push(Warning: ); } last = m.index + m[0].length; } if (last < str.length) result.push(str.slice(last)); return result; }; const expandHtmlTags = (chunks, keyRef) => { const out = []; for (const chunk of chunks) { if (typeof chunk === 'string') { out.push(...expandSimpleTags(chunk, keyRef)); } else { out.push(chunk); } } return out; }; const extractText = node => { if (node === null || node === undefined) return ''; if (typeof node === 'string') return node; if (typeof node === 'number') return String(node); if (typeof node === 'boolean') return ''; if (Array.isArray(node)) return node.map(extractText).join(''); if (node && typeof node === 'object' && node.type) { const props = node.props || ({}); if (typeof props.children === 'string') return props.children; if (props.children) return extractText(props.children); return ''; } return String(node || ''); }; const [mounted, setMounted] = useState(false); useEffect(() => { setMounted(true); }, []); const data = useMemo(() => { if (propData) return propData; if (content && typeof content === 'string') return parseYamlTableContent(content); if (!children) return []; if (typeof children === 'string') return parseYamlTableContent(children); const childrenArray = Array.isArray(children) ? children : [children]; return parseYamlTableContent(childrenArray.map(extractText).join('').trim()); }, [children, propData, content]); const columns = useMemo(() => { if (!data || data.length === 0) return []; const firstRow = data[0]; if (!firstRow || typeof firstRow !== 'object') return []; return Object.keys(firstRow); }, [data]); if (!mounted) return null; if (!data || data.length === 0) return null; const rowKey = row => columns.map(c => row[c] || '').join('|'); return
| {col.replaceAll('_', ' ')} | )}
|---|
| {processBadges(row[col])} | )}
#### Configure bucket lifecycle
You can configure S3 lifecycle rules to automatically delete exported data after a specified retention period. Exported objects do not expire unless you configure lifecycle rules.
1. In the AWS management console, navigate to **Amazon S3** > **Buckets**.
2. Select your bucket.
3. Select **Management** and click **Create lifecycle rule**.
4. Enter a **Lifecycle rule name**, for example, `endor-exports-expiry`.
5. Under **Filter type**, select **Limit the scope of this rule using one or more filters** and enter `endor/` as the prefix to apply the rule only to exported data.
6. Under **Lifecycle rule actions**, select **Expire current versions of objects**.
7. Under **Expire current versions of objects**, enter the number of days after which S3 deletes objects.
8. Review the rule and click **Create rule**.
## Configure access for Endor Labs
Endor Labs uses OIDC federation to assume an IAM role in your AWS account to access the S3 bucket. To allow Endor Labs to write to the bucket, configure OIDC and IAM using one of the following methods:
* Use the [CFT template](#create-aws-resources-using-a-cft-template) to create the OIDC identity provider, IAM role, and S3 write policy.
* Use the [AWS Management console](#create-access-through-the-console) to create access by adding the OIDC identity provider and IAM role.
### Create AWS resources using a CFT template
Use an AWS CloudFormation Template (CFT) to create the IAM role and S3 `PutObject` policy for the S3 exporter. The template can create a new OIDC identity provider for Endor Labs or reuse an existing provider in your account.
The following table lists the parameters you can set when deploying the CFT template.
#### 2. Create an IAM role
Create an IAM role that Endor Labs can assume to write to your S3 bucket. This involves:
1. [Create a permissions policy](#create-a-permissions-policy): Define the S3 write permissions.
2. [Create an IAM role](#create-the-iam-role): Create a role with OIDC trust and attach the policy.
#### Create a permissions policy
1. In the AWS management console, navigate to **IAM** > **Access Management** > **Policies**.
2. Click **Create policy**.
3. Under **Specify permissions**, toggle the **Policy editor** to **JSON**.
4. Enter the following policy:
```json theme={null}
{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Action": [
"s3:PutObject"
],
"Resource": "arn:aws:s3:::
#### Create an IAM role
1. In the AWS management console, navigate to **IAM** > **Access Management** > **Roles**.
2. Click **Create role**.
3. Under **Select trusted entity**, select **Custom trust policy**.
4. Enter the following trust policy:
```json theme={null}
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "EndorWebIdentity",
"Effect": "Allow",
"Principal": {
"Federated": "arn:aws:iam::
5. Click **Next**.
6. Under **Add permissions**, search for and select the IAM policy you created.
7. Click **Next**.
8. Under **Name, review, and create**, enter a **Role name** for the S3 exporter role. For example, `EndorLabsS3ExporterRole`.
9. Optionally, add tags to help identify the role.
10. Click **Create role**.
## Create an S3 exporter
Create an S3 exporter using the Endor Labs API to configure the export destination and data types.
The following table lists the configuration options required to create the exporter.