Amazon S3 Connector

Amazon S3 is an object storage service from Amazon Web Services (AWS).
This component allows you to create, read, update, move, list, and delete objects (files) within an Amazon S3 bucket.

API Documentation

This component was built using the Amazon S3 API Reference.

Connections

AWS Role ARN

Connect to AWS using an assumed role

AWS Assume Role authentication allows assuming an IAM role using temporary security credentials.
This method is useful for cross account access or when implementing principle of least privilege.

Refer to the AWS documentation on assuming roles for detailed information.

Prerequisites

• Completed API Key Secret connection setup (access key pair required)
• Appropriate permissions to create IAM roles

Setup Steps

An IAM user with access keys is required to assume a role. If access keys have not been created, follow the API Key Secret setup steps first, then return here to create the IAM role.

##### Create an IAM Role with Trust Policy

1. From the IAM Console, navigate to Roles and select Create Role
2. Select Custom trust policy as the trusted entity type
3. Enter the trust policy below, replacing USER_ARN with the IAM user ARN:

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Principal": {
        "AWS": "USER_ARN"
      },
      "Action": "sts:AssumeRole"
    }
  ]
}

1. Click Next and attach the appropriate S3 permissions policy (e.g., AmazonS3FullAccess or AmazonS3ReadOnlyAccess)
2. Complete the remaining steps and select Create Role
3. Copy the Role ARN from the role summary (format: arn:aws:iam::123456789012:role/role-name)

Configure the Connection

• Role ARN: The ARN of the IAM role to assume
• Access Key ID: From the IAM user (see API Key Secret)
• Secret Access Key: From the IAM user
• External ID (optional): Shared secret for enhanced security

Verify Connection

The IAM user credentials assume the role, which provides temporary credentials with the role's attached permissions. Ensure the trust policy correctly references the IAM user ARN.

AWS S3 Access Key and Secret

Authenticates requests to AWS S3 using an API Key and Secret.

An AWS IAM access key pair is required to interact with Amazon S3.
Ensure the key pair generated in AWS has proper permissions to the S3 resources to access.
Read more about S3 IAM actions in the AWS documentation.

Prerequisites

• An AWS account with IAM access
• Appropriate permissions to create IAM access keys

Setup Steps

To create an IAM access key pair:

1. Sign in to the AWS Console and navigate to Identity and Access Management (IAM)
2. Select the IAM user that will be used for the integration
3. Navigate to the Security credentials tab
4. Under the Access keys section, select Create access key
5. Choose the appropriate use case (e.g., Third-party service or Application running outside AWS)
6. Copy both the Access key ID and Secret access key when displayed

Configure the Connection

• Enter the Access key ID into the connection configuration
• Enter the Secret access key into the connection configuration

Triggers

New and Updated Files

Checks for new and updated files in a specified S3 bucket on a configured schedule.

New Buckets

Checks for new buckets on a configured schedule.

Webhook

Trigger to handle SNS subscription for S3 event notifications

Actions

Abort Multipart Upload

Abort a multipart upload

Bucket SNS Event Trigger Configuration

Add events to send notifications to SNS Topic

Complete Multipart Upload

Complete a multipart upload

Copy Object

Copy an object in S3 from one location to another

Create Multipart Upload

Create a multipart upload

Create SNS Topic For S3 Event Notification

Create an Amazon SNS Topic to be used with S3 Event Notifications

Delete Bucket

Deletes the S3 bucket. All objects in the bucket must be deleted before the bucket itself can be deleted

Delete Object

Delete an Object within an S3 Bucket

Delete Objects

Delete multiple objects from a bucket

Generate Presigned URL

Generate a presigned URL that can be used to upload or download an object in S3

Generate Presigned URL for Multipart Uploads

Generate presigned URL's that can be used to upload or download an object in S3

Get Bucket Location

Get the location (AWS region) of a bucket by name

Get Bucket Notification Configuration

Returns the notification configuration of a bucket

Get Current Account

Get the current AWS account

Get Object

Get the contents of an object

Get Object Attributes

Retrieves all the metadata from an object without returning the object itself

Get Object Lock Configuration

Gets the Object Lock configuration for a bucket

Get Object Retention

Retrieves an object's retention settings

Head Bucket

Determine if a bucket exists and if you have permission to access it

Head Object

Retrieve metadata from an object without returning the object itself

List Buckets

List all buckets in an AWS account

List Multipart Uploads

Lists in-progress multipart uploads in a bucket

List Objects

List Objects in a Bucket

List Parts

List parts of a multipart upload

Put Bucket Notification Configuration

Replace an existing bucket notification configuration with a new one

Put Object

Write an object to S3

Put Object Lock Configuration

Places an Object Lock configuration on the specified bucket

Put Object Retention

Places an Object Retention configuration on an object

Subscribe to SNS Topic

Subscribe to an Amazon SNS Topic for S3 Event Notifications

Unsubscribe from a SNS Topic

Unsubscribe from an Amazon SNS Topic for S3 Event Notifications

Update SNS Topic Policy For S3 Event Notification

Update an Amazon SNS Topic Policy to grant S3 permission to publish

Upload Part

Upload a chunk of a multipart file upload

Upload Stream - Close Stream

Close an upload stream

Upload Stream - Create Stream

Create an upload stream to S3

Upload Stream - Write Data

Write to an upload stream