Update Guide

We are regulary releasing new version of bucketAV to add features, improve performance, or patch vulnerabilities. Here are the latest versions.

• bucketAV powered by ClamAV®: v2.12.0
• bucketAV powered by Sophos®: v2.1.0

Are you looking for information on how to get started with bucketAV, read the Setup Guide instead!

bucketAV supports updates without downtime. Do not fear updating bucketAV, even during times when objects are scanned.

Update bucketAV

Before you update bucketAV to the latest version, you need to find out the current version, engine, and fulfillment option (aka delivery method) you are using.

1. Visit the AWS CloudFormation Console
2. Ensure that you are in the correct region.
3. Navigate to Stacks.
4. Click on the bucketAV stack (if you followed the docs, the name is bucketav).
5. Click on the Outputs tab.
6. The output Engine shows clamav or sophos. In case, the output Engine is missing, you are running clamav.
7. The output Version shows the current version of bucketAV.
8. The output FulfillmentOption shows the fulfillment option.

Afterwards, pick the Amazon S3 URL of the matching CloudFormation template from the following table.

In case the current version is 1.x, follow the Migration Steps first!

Next, you are ready to update bucketAV.

1. Select the bucketAV stack (e.g., bucketav) and press the Update button.
2. Select Replace current template and paste the Amazon S3 URL that you picked above.
3. Click on Next.
4. Scroll to the bottom of the page and click on Next.
5. Scroll to the bottom of the page and click on Next.
6. Scroll to the bottom of the page, enable I acknowledge that AWS CloudFormation might create IAM resources, and click on Update stack.
7. While the update runs, the stack status is UPDATE_IN_PROGRES. Reload the table from time to time and …
8. … wait until the CloudFormation stack status switches to UPDATE_COMPLETE.

You are done!

Migration Steps

v1 to v2

• The product was renamed from VirusScan for Amazon S3 to bucketAV - Antivirus for Amazon S3.
• EC2 instances now run on spot capacity. Set the CapacityStrategy configuration parameter to OnDemandOnly to launch on-demand instances as before (more expensive).
• The parameter configuration VolumeSize was removed. No action is needed.
• The SNS message subject changed from s3-virusscan s3://${BUCKET_NAME} to bucketAV Scan Result for S3 Bucket ${BUCKET_NAME}. No topic subscriber should rely on the subject.
• The configuration parameter TagKey now defaults to bucketav (previously s3-virusscan) for new installations. You can change the default if needed.
• If the configuration parameter OpsCenterIntegration is set to true, the source in Ops Items changes from s3-virusscan to bucketAV.
• Add-Ons
  • The configuration parameter S3VirusScanStackName changed to BucketAVStackName.

v1.3 to 1.4

If you use bucketAV in a Multi-Account setup, please allowlist all accounts by adding them (comma separated) to the AWSAccountRestriction configuration parameter.