Update Guide

We regularly release new bucketAV versions to add features, improve performance, or patch vulnerabilities (see our release notes). The latest versions are:

• bucketAV for Amazon S3 powered by ClamAV®: v2.29.0
• bucketAV for Amazon S3 powered by Sophos®: v2.21.0
• bucketAV for Amazon S3 powered by multiple engines: v2.0.0
• bucketAV for Cloudflare R2 powered by ClamAV®: v2.8.0
• bucketAV for Cloudflare R2 powered by Sophos®: v2.8.0

bucketAV supports updates without downtime. You don’t need to be afraid of updating bucketAV, even when files are scanned.

There are two ways to update bucketAV: The preferred Quick Update and the legacy Manual Update.

Quick Update

Requires bucketAV for Amazon S3 powered by ClamAV® version >= 2.15.0, bucketAV for Amazon S3 powered by Sophos® version >= 2.5.0, or any version of bucketAV for Cloudflare R2. If you are using an older version, perform a manual update instead.

1. Visit the AWS CloudWatch Management Console.
2. Navigate to Dashboards.
3. Select the dashboard starting with the name bucketav followed by the name of the AWS region—for example, bucketav-eu-west-1.
4. Find the Update tile. Click the Update button. If there is no Update tile in your dashboard, perform a manual update.
5. You are redirected to AWS CloudFormation. Click on Next.
6. Scroll to the bottom of the page and click on Next.
7. Scroll to the bottom of the page, enable I acknowledge that AWS CloudFormation might create IAM resources, and click on Next.
8. Scroll to the bottom of the page and click on Submit.
9. While the update runs, the stack status is UPDATE_IN_PROGRES. Reload the table from time to time and …
10. … wait until the CloudFormation stack status switches to UPDATE_COMPLETE.

Don’t forget to update your Add-Ons in the dashboard!

Manual Update

Before you update bucketAV to the latest version, you need to find out the current version, engine, and fulfillment option you are using.

1. Visit the AWS CloudFormation Console
2. Ensure that you are in the correct region.
3. Navigate to Stacks.
4. Click on the bucketAV stack (if you followed the docs, the name is bucketav).
5. Click on the Outputs tab.
6. The output Platform shows aws or cloudflare. In case, the output Platform is missing, you are running aws.
7. The output Engine shows clamav, sophos or multi. In case, the output Engine is missing, you are running clamav.
8. The output Version shows the current version of bucketAV.
9. The output FulfillmentOption shows the fulfillment option.

Afterward, pick the Amazon S3 URL of the matching CloudFormation template from the following table.

• Amazon S3 (ClamAV)
• Amazon S3 (Sophos)
• Amazon S3 (Multiple engines)
• Cloudflare R2 (ClamAV)
• Cloudflare R2 (Sophos)

Next, you are ready to update bucketAV.

1. Select the bucketAV stack (e.g., bucketav) and press the Update stack button; press Make a direct update.
2. Select Replace existing template and paste the Amazon S3 URL that you picked above.
3. Click on Next.
4. Scroll to the bottom of the page and click on Next.
5. Scroll to the bottom of the page, enable I acknowledge that AWS CloudFormation might create IAM resources, and click on Next.
6. Scroll to the bottom of the page and click on Submit.
7. While the update runs, the stack status is UPDATE_IN_PROGRES. Reload the table from time to time and …
8. … wait until the CloudFormation stack status switches to UPDATE_COMPLETE.

Don’t forget to update your Add-Ons!

Migration Steps

v1 to v2

• The product was renamed from VirusScan for Amazon S3 to bucketAV - Antivirus for Amazon S3.
• EC2 instances now run on spot capacity. Set the CapacityStrategy configuration parameter to OnDemandOnly to launch on-demand instances as before (more expensive).
• The parameter configuration VolumeSize was removed. No action is needed.
• The SNS message subject changed from s3-virusscan s3://${BUCKET_NAME} to bucketAV Scan Result for S3 Bucket ${BUCKET_NAME}. No topic subscriber should rely on the subject.
• The configuration parameter TagKey now defaults to bucketav (previously s3-virusscan) for new installations. You can change the default if needed.
• If the configuration parameter OpsCenterIntegration is set to true, the source in Ops Items changes from s3-virusscan to bucketAV.
• Add-Ons
  • The configuration parameter S3VirusScanStackName changed to BucketAVStackName.

v1.3 to 1.4

If you use bucketAV in a Multi-Account setup, please allowlist all accounts by adding them (comma separated) to the AWSAccountRestriction configuration parameter.