Upload data to the SPE

Upload your data securely to the Secure Processing Environment (SPE). The platform provides a secure data inbox (S3 bucket) dedicated for your data submission.

Prerequisites

Before you begin, ensure you have the following:

• Your S3 bucket credentials: Check your email for a secure, one-time access link containing your access credentials:

  • S3 endpoint
  • Bucket name
  • Access key
  • Secret key

• OpenSSL:

  • On Windows: Use OpenSSL in your Git terminal. See the Git installation guide^⤴.
  • On macOS: Install with Homebrew using brew install openssl.

• AWS CLI: See the AWS CLI installation guide^⤴.

Upload your data

1. Compress your data using tar to create a single tarball:

   tar -cvf <your-data>.tar <path-to-your-data-directory>
   

2. Encrypt the compressed file using AES-256 encryption via OpenSSL:

   openssl enc -aes-256-cbc -pbkdf2 -salt -in <your-data>.tar -out <your-data>.tar.enc
   

   Note: You will be prompted to enter a password to encrypt the file. Enter a strong password of your choice and remember it for sharing with the appropriate reviewer.

3. Configure your S3 profile using the credentials from the secure link emailed to you:

   aws configure --profile spe-$PROJECT_NAME
   
   AWS Access Key ID [None]: # Copy from the one-time link 
   AWS Secret Access Key [None]: # Copy from the one-time link 
   Default region name [None]:
   Default output format [None]:
   

4. Upload the encrypted data to the S3 bucket:

   aws s3 cp --profile spe-$PROJECT_NAME <your-data>.tar.enc s3://$BUCKET_NAME/<your-data>.tar.enc --checksum-algorithm SHA256 --endpoint-url https://s3-luxembourg.obj.ebrc.com/ 
   

5. Share the encryption key with your analyst or the appropriate reviewer.