---
title: "Amazon S3 Connector"
slug: "amazon-s3-connector"
description: "Manage AWS S3 files with IAM roles, access keys, and SNS notifications. Learn to create, configure, and secure your S3 bucket effectively."
updated: 2026-07-17T15:42:47Z
published: 2026-06-12T14:34:45Z
canonical: "docs.lansweeper.com/amazon-s3-connector"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.lansweeper.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Amazon S3 Connector

Note on third‑party tools

              

We aim to provide accurate and helpful details about third‑party tools, but we can’t guarantee that this information is always complete or up to date. If you notice any discrepancies, feel free to share them in the feedback section below. For the most reliable information, please always refer to the third‑party tool’s official documentation.

[Amazon S3](https://aws.amazon.com/s3/) is an object storage service from Amazon Web Services (AWS). This component allows you to create, read, update, move, list, and delete objects (files) within an Amazon S3 bucket.

## API Documentation

This component was built using the [Amazon S3 API Reference](https://docs.aws.amazon.com/AmazonS3/latest/API/Type_API_Reference.html).

## Connections

### AWS Role ARN

Connect to AWS using an assumed role

AWS Assume Role authentication allows assuming an IAM role using temporary security credentials. This method is useful for cross account access or when implementing principle of least privilege.

Refer to the [AWS documentation on assuming roles](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_use.html) for detailed information.

#### Prerequisites

- Completed [API Key Secret](/docs/amazon-s3-connector#apikeysecret) connection setup (access key pair required)
- Appropriate permissions to create IAM roles

#### Setup Steps

An IAM user with access keys is required to assume a role. If access keys have not been created, follow the [API Key Secret](/docs/amazon-s3-connector#apikeysecret) setup steps first, then return here to create the IAM role.

##### Create an IAM Role with Trust Policy

1. From the [IAM Console](https://console.aws.amazon.com/iam/), navigate to **Roles** and select **Create Role**
2. Select **Custom trust policy** as the trusted entity type
3. Enter the trust policy below, replacing `USER_ARN` with the IAM user ARN:

**View trust policy template**

```
{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Principal": {
        "AWS": "USER_ARN"
      },
      "Action": "sts:AssumeRole"
    }
  ]
}
```

1. Click **Next** and attach the appropriate S3 permissions policy (e.g., **AmazonS3FullAccess** or **AmazonS3ReadOnlyAccess**)
2. Complete the remaining steps and select **Create Role**
3. Copy the **Role ARN** from the role summary (format: `arn:aws:iam::123456789012:role/role-name`)

#### Configure the Connection

- **Role ARN**: The ARN of the IAM role to assume
- **Access Key ID**: From the IAM user (see [API Key Secret](/docs/amazon-s3-connector#apikeysecret))
- **Secret Access Key**: From the IAM user
- **External ID** (optional): Shared secret for enhanced security

              External ID

              

The **External ID** provides additional security for cross-account access. Refer to the [AWS documentation](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_common-scenarios_third-party.html#id_roles_third-party_external-id) for more information.

#### Verify Connection

The IAM user credentials assume the role, which provides temporary credentials with the role's attached permissions. Ensure the trust policy correctly references the IAM user ARN.

| Input | Comments | Default |
| --- | --- | --- |
| Role ARN | An AWS IAM Role ARN |  |
| Access Key ID | An AWS IAM Access Key ID |  |
| Secret Access Key | An AWS IAM Secret Access Key |  |
| External ID | Provides enhanced security measures to the connection. Optional, but recommended. Please check [AWS docs](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_common-scenarios_third-party.html#id_roles_third-party_external-id) for more information. |  |

### AWS S3 Access Key and Secret

Authenticates requests to AWS S3 using an API Key and Secret.

An AWS IAM [access key pair](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_access-keys.html) is required to interact with Amazon S3. Ensure the key pair generated in AWS has proper permissions to the S3 resources to access. Read more about S3 IAM actions in the [AWS documentation](https://docs.aws.amazon.com/AmazonS3/latest/userguide/using-with-s3-actions.html).

#### Prerequisites

- An [AWS account](https://aws.amazon.com/) with IAM access
- Appropriate permissions to create IAM access keys

#### Setup Steps

To create an IAM access key pair:

1. Sign in to the [AWS Console](https://aws.amazon.com/) and navigate to **Identity and Access Management (IAM)**
2. Select the IAM user that will be used for the integration
3. Navigate to the **Security credentials** tab
4. Under the **Access keys** section, select **Create access key**
5. Choose the appropriate use case (e.g., **Third-party service** or **Application running outside AWS**)
6. Copy both the **Access key ID** and **Secret access key** when displayed

              Secret Key Visibility

              

The **Secret access key** is only shown once during creation. If it is not copied at this time, a new access key pair must be created.

#### Configure the Connection

- Enter the **Access key ID** into the connection configuration
- Enter the **Secret access key** into the connection configuration

| Input | Comments | Default |
| --- | --- | --- |
| Access Key ID | AWS IAM Access Key ID used for programmatic access. Create access keys in the [AWS IAM Console](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_access-keys.html) under Security Credentials. |  |
| Secret Access Key | AWS IAM Secret Access Key paired with the Access Key ID. **Important:** This value is only shown once when created in the [AWS IAM Console](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_access-keys.html). |  |

## Triggers

### New and Updated Files

Checks for new and updated files in a specified S3 bucket on a configured schedule.

| Input | Comments | Default |
| --- | --- | --- |
| Bucket Name | An Amazon S3 'bucket' is a container where files are stored. You can create a bucket from within the AWS console. Bucket names contain only letters, numbers, and dashes. |  |
| Connection | The AWS S3 connection to use for authentication. Access keys provide programmatic access to AWS resources. [Learn more](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_access-keys.html). |  |
| AWS Region | AWS provides services in multiple regions, like us-west-2 or eu-west-1. |  |
| Dynamic Access Key ID | Use this input to authenticate with AWS if you are using a dynamically-generated access key. Otherwise, use the connection to enter a static access key ID. |  |
| Dynamic Secret Access Key | Use this input to authenticate with AWS if you are using a dynamically-generated secret access key. Otherwise, use the connection to enter a static secret access key. |  |
| Dynamic Session Token | Use this input to authenticate with AWS if you are using a OPTIONAL dynamically-generated session token. |  |

### New Buckets

Checks for new buckets on a configured schedule.

| Input | Comments | Default |
| --- | --- | --- |
| Connection | The AWS S3 connection to use for authentication. Access keys provide programmatic access to AWS resources. [Learn more](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_access-keys.html). |  |
| AWS Region | AWS provides services in multiple regions, like us-west-2 or eu-west-1. |  |
| Dynamic Access Key ID | Use this input to authenticate with AWS if you are using a dynamically-generated access key. Otherwise, use the connection to enter a static access key ID. |  |
| Dynamic Secret Access Key | Use this input to authenticate with AWS if you are using a dynamically-generated secret access key. Otherwise, use the connection to enter a static secret access key. |  |
| Dynamic Session Token | Use this input to authenticate with AWS if you are using a OPTIONAL dynamically-generated session token. |  |

### Webhook

Trigger to handle SNS subscription for S3 event notifications

## Actions

### Abort Multipart Upload

Abort a multipart upload

| Input | Comments | Default |
| --- | --- | --- |
| AWS Region | AWS provides services in multiple regions, like us-west-2 or eu-west-1. |  |
| Connection | The AWS S3 connection to use for authentication. Access keys provide programmatic access to AWS resources. [Learn more](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_access-keys.html). |  |
| Dynamic Access Key ID | Use this input to authenticate with AWS if you are using a dynamically-generated access key. Otherwise, use the connection to enter a static access key ID. |  |
| Dynamic Secret Access Key | Use this input to authenticate with AWS if you are using a dynamically-generated secret access key. Otherwise, use the connection to enter a static secret access key. |  |
| Dynamic Session Token | Use this input to authenticate with AWS if you are using a OPTIONAL dynamically-generated session token. |  |
| Bucket Name | An Amazon S3 'bucket' is a container where files are stored. You can create a bucket from within the AWS console. Bucket names contain only letters, numbers, and dashes. |  |
| Object Key | An object in S3 is a file that is saved in a 'bucket'. This represents the object's key (file path). Do not include a leading /. |  |
| Upload ID | The unique identifier for the multipart upload, returned by 'Create Multipart Upload' action. |  |

### Bucket SNS Event Trigger Configuration

Add events to send notifications to SNS Topic

| Input | Comments | Default |
| --- | --- | --- |
| AWS Region | AWS provides services in multiple regions, like us-west-2 or eu-west-1. |  |
| SNS Topic ARN | The Amazon Resource Name (ARN) of the SNS topic. For more information, see [SNS ARN Format](https://docs.aws.amazon.com/sns/latest/dg/sns-getting-started.html). |  |
| Event Types | S3 event types that will trigger notifications. For more information, see [S3 Event Notification Types](https://docs.aws.amazon.com/AmazonS3/latest/userguide/notification-how-to-event-types-and-destinations.html). |  |
| Connection | The AWS S3 connection to use for authentication. Access keys provide programmatic access to AWS resources. [Learn more](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_access-keys.html). |  |
| Dynamic Access Key ID | Use this input to authenticate with AWS if you are using a dynamically-generated access key. Otherwise, use the connection to enter a static access key ID. |  |
| Dynamic Secret Access Key | Use this input to authenticate with AWS if you are using a dynamically-generated secret access key. Otherwise, use the connection to enter a static secret access key. |  |
| Dynamic Session Token | Use this input to authenticate with AWS if you are using a OPTIONAL dynamically-generated session token. |  |
| Bucket Name | An Amazon S3 'bucket' is a container where files are stored. You can create a bucket from within the AWS console. Bucket names contain only letters, numbers, and dashes. |  |
| Event Notification Name | A unique name for the event notification configuration. |  |
| Bucket Owner Account ID | The 12-digit AWS Account ID of the bucket owner. Find this in the AWS Console account settings or use the 'Get Current Account' action. |  |

### Complete Multipart Upload

Complete a multipart upload

| Input | Comments | Default |
| --- | --- | --- |
| AWS Region | AWS provides services in multiple regions, like us-west-2 or eu-west-1. |  |
| Connection | The AWS S3 connection to use for authentication. Access keys provide programmatic access to AWS resources. [Learn more](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_access-keys.html). |  |
| Dynamic Access Key ID | Use this input to authenticate with AWS if you are using a dynamically-generated access key. Otherwise, use the connection to enter a static access key ID. |  |
| Dynamic Secret Access Key | Use this input to authenticate with AWS if you are using a dynamically-generated secret access key. Otherwise, use the connection to enter a static secret access key. |  |
| Dynamic Session Token | Use this input to authenticate with AWS if you are using a OPTIONAL dynamically-generated session token. |  |
| Bucket Name | An Amazon S3 'bucket' is a container where files are stored. You can create a bucket from within the AWS console. Bucket names contain only letters, numbers, and dashes. |  |
| Object Key | An object in S3 is a file that is saved in a 'bucket'. This represents the object's key (file path). Do not include a leading /. |  |
| Upload ID | The unique identifier for the multipart upload, returned by 'Create Multipart Upload' action. |  |
| Parts | The list of uploaded parts to complete the multipart upload. Reference the 'Parts' field from the 'List Parts' action output. |  |

### Copy Object

Copy an object in S3 from one location to another

| Input | Comments | Default |
| --- | --- | --- |
| AWS Region | AWS provides services in multiple regions, like us-west-2 or eu-west-1. |  |
| Connection | The AWS S3 connection to use for authentication. Access keys provide programmatic access to AWS resources. [Learn more](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_access-keys.html). |  |
| Dynamic Access Key ID | Use this input to authenticate with AWS if you are using a dynamically-generated access key. Otherwise, use the connection to enter a static access key ID. |  |
| Dynamic Secret Access Key | Use this input to authenticate with AWS if you are using a dynamically-generated secret access key. Otherwise, use the connection to enter a static secret access key. |  |
| Dynamic Session Token | Use this input to authenticate with AWS if you are using a OPTIONAL dynamically-generated session token. |  |
| Source Bucket Name | The source bucket containing the object to copy. For same-bucket copies, use the same name for both source and destination buckets. |  |
| Destination Bucket Name | The destination bucket where the object will be copied. For same-bucket copies, use the same name for both source and destination buckets. |  |
| Source Key | The source object's key (file path) to copy from. Do not include a leading /. |  |
| Destination Key | The destination object's key (file path) to copy to. Do not include a leading /. |  |
| ACL Permissions | Canned ACL permissions to apply to the object. For more information, see [S3 Canned ACLs](https://docs.aws.amazon.com/AmazonS3/latest/userguide/acl-overview.html#canned-acl). |  |

### Create Multipart Upload

Create a multipart upload

| Input | Comments | Default |
| --- | --- | --- |
| AWS Region | AWS provides services in multiple regions, like us-west-2 or eu-west-1. |  |
| Connection | The AWS S3 connection to use for authentication. Access keys provide programmatic access to AWS resources. [Learn more](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_access-keys.html). |  |
| Dynamic Access Key ID | Use this input to authenticate with AWS if you are using a dynamically-generated access key. Otherwise, use the connection to enter a static access key ID. |  |
| Dynamic Secret Access Key | Use this input to authenticate with AWS if you are using a dynamically-generated secret access key. Otherwise, use the connection to enter a static secret access key. |  |
| Dynamic Session Token | Use this input to authenticate with AWS if you are using a OPTIONAL dynamically-generated session token. |  |
| Bucket Name | An Amazon S3 'bucket' is a container where files are stored. You can create a bucket from within the AWS console. Bucket names contain only letters, numbers, and dashes. |  |
| Object Key | An object in S3 is a file that is saved in a 'bucket'. This represents the object's key (file path). Do not include a leading /. |  |
| Object Tags | Key-value pairs to tag the object for filtering and organization. For more information, see [S3 Object Tagging](https://docs.aws.amazon.com/AmazonS3/latest/userguide/object-tagging.html). |  |
| ACL Permissions | Canned ACL permissions to apply to the object. For more information, see [S3 Canned ACLs](https://docs.aws.amazon.com/AmazonS3/latest/userguide/acl-overview.html#canned-acl). |  |

### Create SNS Topic For S3 Event Notification

Create an Amazon SNS Topic to be used with S3 Event Notifications

| Input | Comments | Default |
| --- | --- | --- |
| AWS Region | AWS provides services in multiple regions, like us-west-2 or eu-west-1. |  |
| Name | The name of the SNS topic to create. |  |
| Connection | The AWS S3 connection to use for authentication. Access keys provide programmatic access to AWS resources. [Learn more](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_access-keys.html). |  |
| Dynamic Access Key ID | Use this input to authenticate with AWS if you are using a dynamically-generated access key. Otherwise, use the connection to enter a static access key ID. |  |
| Dynamic Secret Access Key | Use this input to authenticate with AWS if you are using a dynamically-generated secret access key. Otherwise, use the connection to enter a static secret access key. |  |
| Dynamic Session Token | Use this input to authenticate with AWS if you are using a OPTIONAL dynamically-generated session token. |  |

### Delete Bucket

Deletes the S3 bucket. All objects in the bucket must be deleted before the bucket itself can be deleted

| Input | Comments | Default |
| --- | --- | --- |
| AWS Region | AWS provides services in multiple regions, like us-west-2 or eu-west-1. |  |
| Connection | The AWS S3 connection to use for authentication. Access keys provide programmatic access to AWS resources. [Learn more](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_access-keys.html). |  |
| Dynamic Access Key ID | Use this input to authenticate with AWS if you are using a dynamically-generated access key. Otherwise, use the connection to enter a static access key ID. |  |
| Dynamic Secret Access Key | Use this input to authenticate with AWS if you are using a dynamically-generated secret access key. Otherwise, use the connection to enter a static secret access key. |  |
| Dynamic Session Token | Use this input to authenticate with AWS if you are using a OPTIONAL dynamically-generated session token. |  |
| Bucket Name | An Amazon S3 'bucket' is a container where files are stored. You can create a bucket from within the AWS console. Bucket names contain only letters, numbers, and dashes. |  |

### Delete Object

Delete an Object within an S3 Bucket

| Input | Comments | Default |
| --- | --- | --- |
| AWS Region | AWS provides services in multiple regions, like us-west-2 or eu-west-1. |  |
| Connection | The AWS S3 connection to use for authentication. Access keys provide programmatic access to AWS resources. [Learn more](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_access-keys.html). |  |
| Dynamic Access Key ID | Use this input to authenticate with AWS if you are using a dynamically-generated access key. Otherwise, use the connection to enter a static access key ID. |  |
| Dynamic Secret Access Key | Use this input to authenticate with AWS if you are using a dynamically-generated secret access key. Otherwise, use the connection to enter a static secret access key. |  |
| Dynamic Session Token | Use this input to authenticate with AWS if you are using a OPTIONAL dynamically-generated session token. |  |
| Bucket Name | An Amazon S3 'bucket' is a container where files are stored. You can create a bucket from within the AWS console. Bucket names contain only letters, numbers, and dashes. |  |
| Object Key | An object in S3 is a file that is saved in a 'bucket'. This represents the object's key (file path). Do not include a leading /. |  |

### Delete Objects

Delete multiple objects from a bucket

| Input | Comments | Default |
| --- | --- | --- |
| AWS Region | AWS provides services in multiple regions, like us-west-2 or eu-west-1. |  |
| Connection | The AWS S3 connection to use for authentication. Access keys provide programmatic access to AWS resources. [Learn more](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_access-keys.html). |  |
| Dynamic Access Key ID | Use this input to authenticate with AWS if you are using a dynamically-generated access key. Otherwise, use the connection to enter a static access key ID. |  |
| Dynamic Secret Access Key | Use this input to authenticate with AWS if you are using a dynamically-generated secret access key. Otherwise, use the connection to enter a static secret access key. |  |
| Dynamic Session Token | Use this input to authenticate with AWS if you are using a OPTIONAL dynamically-generated session token. |  |
| Bucket Name | An Amazon S3 'bucket' is a container where files are stored. You can create a bucket from within the AWS console. Bucket names contain only letters, numbers, and dashes. |  |
| Object Keys | A list of object keys to delete. These are the file paths of the objects you want to delete. Do not include a leading /. |  |

### Generate Presigned URL

Generate a presigned URL that can be used to upload or download an object in S3

| Input | Comments | Default |
| --- | --- | --- |
| AWS Region | AWS provides services in multiple regions, like us-west-2 or eu-west-1. |  |
| Connection | The AWS S3 connection to use for authentication. Access keys provide programmatic access to AWS resources. [Learn more](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_access-keys.html). |  |
| Dynamic Access Key ID | Use this input to authenticate with AWS if you are using a dynamically-generated access key. Otherwise, use the connection to enter a static access key ID. |  |
| Dynamic Secret Access Key | Use this input to authenticate with AWS if you are using a dynamically-generated secret access key. Otherwise, use the connection to enter a static secret access key. |  |
| Dynamic Session Token | Use this input to authenticate with AWS if you are using a OPTIONAL dynamically-generated session token. |  |
| Bucket Name | An Amazon S3 'bucket' is a container where files are stored. You can create a bucket from within the AWS console. Bucket names contain only letters, numbers, and dashes. |  |
| Object Key | An object in S3 is a file that is saved in a 'bucket'. This represents the object's key (file path). Do not include a leading /. |  |
| Action Type | Specifies whether the presigned URL will allow download or upload operations. | download |
| Expiration Seconds | Number of seconds until the presigned URL expires. Default is 3600 (1 hour). | 3600 |

### Generate Presigned URL for Multipart Uploads

Generate presigned URL's that can be used to upload or download an object in S3

| Input | Comments | Default |
| --- | --- | --- |
| AWS Region | AWS provides services in multiple regions, like us-west-2 or eu-west-1. |  |
| Connection | The AWS S3 connection to use for authentication. Access keys provide programmatic access to AWS resources. [Learn more](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_access-keys.html). |  |
| Dynamic Access Key ID | Use this input to authenticate with AWS if you are using a dynamically-generated access key. Otherwise, use the connection to enter a static access key ID. |  |
| Dynamic Secret Access Key | Use this input to authenticate with AWS if you are using a dynamically-generated secret access key. Otherwise, use the connection to enter a static secret access key. |  |
| Dynamic Session Token | Use this input to authenticate with AWS if you are using a OPTIONAL dynamically-generated session token. |  |
| Bucket Name | An Amazon S3 'bucket' is a container where files are stored. You can create a bucket from within the AWS console. Bucket names contain only letters, numbers, and dashes. |  |
| Object Key | An object in S3 is a file that is saved in a 'bucket'. This represents the object's key (file path). Do not include a leading /. |  |
| URLs to Generate | The number of presigned URLs to generate for multipart uploads. | 5 |
| Upload ID | The unique identifier for the multipart upload, returned by 'Create Multipart Upload' action. |  |
| Expiration Seconds | Number of seconds until the presigned URL expires. Default is 3600 (1 hour). | 3600 |

### Get Bucket Location

Get the location (AWS region) of a bucket by name

| Input | Comments | Default |
| --- | --- | --- |
| Connection | The AWS S3 connection to use for authentication. Access keys provide programmatic access to AWS resources. [Learn more](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_access-keys.html). |  |
| Dynamic Access Key ID | Use this input to authenticate with AWS if you are using a dynamically-generated access key. Otherwise, use the connection to enter a static access key ID. |  |
| Dynamic Secret Access Key | Use this input to authenticate with AWS if you are using a dynamically-generated secret access key. Otherwise, use the connection to enter a static secret access key. |  |
| Dynamic Session Token | Use this input to authenticate with AWS if you are using a OPTIONAL dynamically-generated session token. |  |
| Bucket Name | An Amazon S3 'bucket' is a container where files are stored. You can create a bucket from within the AWS console. Bucket names contain only letters, numbers, and dashes. |  |

### Get Bucket Notification Configuration

Returns the notification configuration of a bucket

| Input | Comments | Default |
| --- | --- | --- |
| AWS Region | AWS provides services in multiple regions, like us-west-2 or eu-west-1. |  |
| Connection | The AWS S3 connection to use for authentication. Access keys provide programmatic access to AWS resources. [Learn more](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_access-keys.html). |  |
| Dynamic Access Key ID | Use this input to authenticate with AWS if you are using a dynamically-generated access key. Otherwise, use the connection to enter a static access key ID. |  |
| Dynamic Secret Access Key | Use this input to authenticate with AWS if you are using a dynamically-generated secret access key. Otherwise, use the connection to enter a static secret access key. |  |
| Dynamic Session Token | Use this input to authenticate with AWS if you are using a OPTIONAL dynamically-generated session token. |  |
| Bucket Name | An Amazon S3 'bucket' is a container where files are stored. You can create a bucket from within the AWS console. Bucket names contain only letters, numbers, and dashes. |  |

### Get Current Account

Get the current AWS account

| Input | Comments | Default |
| --- | --- | --- |
| Connection | The AWS S3 connection to use for authentication. Access keys provide programmatic access to AWS resources. [Learn more](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_access-keys.html). |  |
| Dynamic Access Key ID | Use this input to authenticate with AWS if you are using a dynamically-generated access key. Otherwise, use the connection to enter a static access key ID. |  |
| Dynamic Secret Access Key | Use this input to authenticate with AWS if you are using a dynamically-generated secret access key. Otherwise, use the connection to enter a static secret access key. |  |
| Dynamic Session Token | Use this input to authenticate with AWS if you are using a OPTIONAL dynamically-generated session token. |  |

### Get Object

Get the contents of an object

| Input | Comments | Default |
| --- | --- | --- |
| AWS Region | AWS provides services in multiple regions, like us-west-2 or eu-west-1. |  |
| Connection | The AWS S3 connection to use for authentication. Access keys provide programmatic access to AWS resources. [Learn more](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_access-keys.html). |  |
| Dynamic Access Key ID | Use this input to authenticate with AWS if you are using a dynamically-generated access key. Otherwise, use the connection to enter a static access key ID. |  |
| Dynamic Secret Access Key | Use this input to authenticate with AWS if you are using a dynamically-generated secret access key. Otherwise, use the connection to enter a static secret access key. |  |
| Dynamic Session Token | Use this input to authenticate with AWS if you are using a OPTIONAL dynamically-generated session token. |  |
| Bucket Name | An Amazon S3 'bucket' is a container where files are stored. You can create a bucket from within the AWS console. Bucket names contain only letters, numbers, and dashes. |  |
| Object Key | An object in S3 is a file that is saved in a 'bucket'. This represents the object's key (file path). Do not include a leading /. |  |

### Get Object Attributes

Retrieves all the metadata from an object without returning the object itself

| Input | Comments | Default |
| --- | --- | --- |
| AWS Region | AWS provides services in multiple regions, like us-west-2 or eu-west-1. |  |
| Connection | The AWS S3 connection to use for authentication. Access keys provide programmatic access to AWS resources. [Learn more](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_access-keys.html). |  |
| Dynamic Access Key ID | Use this input to authenticate with AWS if you are using a dynamically-generated access key. Otherwise, use the connection to enter a static access key ID. |  |
| Dynamic Secret Access Key | Use this input to authenticate with AWS if you are using a dynamically-generated secret access key. Otherwise, use the connection to enter a static secret access key. |  |
| Dynamic Session Token | Use this input to authenticate with AWS if you are using a OPTIONAL dynamically-generated session token. |  |
| Bucket Name | An Amazon S3 'bucket' is a container where files are stored. You can create a bucket from within the AWS console. Bucket names contain only letters, numbers, and dashes. |  |
| Object Key | An object in S3 is a file that is saved in a 'bucket'. This represents the object's key (file path). Do not include a leading /. |  |
| Object Attributes | The object attributes to return in the response. Unspecified attributes are not returned. |  |
| Version ID | The version ID for the object whose metadata you want to retrieve. |  |

### Get Object Lock Configuration

Gets the Object Lock configuration for a bucket

| Input | Comments | Default |
| --- | --- | --- |
| AWS Region | AWS provides services in multiple regions, like us-west-2 or eu-west-1. |  |
| Connection | The AWS S3 connection to use for authentication. Access keys provide programmatic access to AWS resources. [Learn more](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_access-keys.html). |  |
| Dynamic Access Key ID | Use this input to authenticate with AWS if you are using a dynamically-generated access key. Otherwise, use the connection to enter a static access key ID. |  |
| Dynamic Secret Access Key | Use this input to authenticate with AWS if you are using a dynamically-generated secret access key. Otherwise, use the connection to enter a static secret access key. |  |
| Dynamic Session Token | Use this input to authenticate with AWS if you are using a OPTIONAL dynamically-generated session token. |  |
| Bucket Name | An Amazon S3 'bucket' is a container where files are stored. You can create a bucket from within the AWS console. Bucket names contain only letters, numbers, and dashes. |  |

### Get Object Retention

Retrieves an object's retention settings

| Input | Comments | Default |
| --- | --- | --- |
| AWS Region | AWS provides services in multiple regions, like us-west-2 or eu-west-1. |  |
| Connection | The AWS S3 connection to use for authentication. Access keys provide programmatic access to AWS resources. [Learn more](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_access-keys.html). |  |
| Dynamic Access Key ID | Use this input to authenticate with AWS if you are using a dynamically-generated access key. Otherwise, use the connection to enter a static access key ID. |  |
| Dynamic Secret Access Key | Use this input to authenticate with AWS if you are using a dynamically-generated secret access key. Otherwise, use the connection to enter a static secret access key. |  |
| Dynamic Session Token | Use this input to authenticate with AWS if you are using a OPTIONAL dynamically-generated session token. |  |
| Bucket Name | An Amazon S3 'bucket' is a container where files are stored. You can create a bucket from within the AWS console. Bucket names contain only letters, numbers, and dashes. |  |
| Object Key | An object in S3 is a file that is saved in a 'bucket'. This represents the object's key (file path). Do not include a leading /. |  |
| Version ID | The version ID for the object whose retention settings you want to retrieve. |  |

### Head Bucket

Determine if a bucket exists and if you have permission to access it

| Input | Comments | Default |
| --- | --- | --- |
| AWS Region | AWS provides services in multiple regions, like us-west-2 or eu-west-1. |  |
| Connection | The AWS S3 connection to use for authentication. Access keys provide programmatic access to AWS resources. [Learn more](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_access-keys.html). |  |
| Dynamic Access Key ID | Use this input to authenticate with AWS if you are using a dynamically-generated access key. Otherwise, use the connection to enter a static access key ID. |  |
| Dynamic Secret Access Key | Use this input to authenticate with AWS if you are using a dynamically-generated secret access key. Otherwise, use the connection to enter a static secret access key. |  |
| Dynamic Session Token | Use this input to authenticate with AWS if you are using a OPTIONAL dynamically-generated session token. |  |
| Bucket Name | An Amazon S3 'bucket' is a container where files are stored. You can create a bucket from within the AWS console. Bucket names contain only letters, numbers, and dashes. |  |

### Head Object

Retrieve metadata from an object without returning the object itself

| Input | Comments | Default |
| --- | --- | --- |
| AWS Region | AWS provides services in multiple regions, like us-west-2 or eu-west-1. |  |
| Connection | The AWS S3 connection to use for authentication. Access keys provide programmatic access to AWS resources. [Learn more](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_access-keys.html). |  |
| Dynamic Access Key ID | Use this input to authenticate with AWS if you are using a dynamically-generated access key. Otherwise, use the connection to enter a static access key ID. |  |
| Dynamic Secret Access Key | Use this input to authenticate with AWS if you are using a dynamically-generated secret access key. Otherwise, use the connection to enter a static secret access key. |  |
| Dynamic Session Token | Use this input to authenticate with AWS if you are using a OPTIONAL dynamically-generated session token. |  |
| Bucket Name | An Amazon S3 'bucket' is a container where files are stored. You can create a bucket from within the AWS console. Bucket names contain only letters, numbers, and dashes. |  |
| Object Key | An object in S3 is a file that is saved in a 'bucket'. This represents the object's key (file path). Do not include a leading /. |  |

### List Buckets

List all buckets in an AWS account

| Input | Comments | Default |
| --- | --- | --- |
| AWS Region | AWS provides services in multiple regions, like us-west-2 or eu-west-1. |  |
| Connection | The AWS S3 connection to use for authentication. Access keys provide programmatic access to AWS resources. [Learn more](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_access-keys.html). |  |
| Dynamic Access Key ID | Use this input to authenticate with AWS if you are using a dynamically-generated access key. Otherwise, use the connection to enter a static access key ID. |  |
| Dynamic Secret Access Key | Use this input to authenticate with AWS if you are using a dynamically-generated secret access key. Otherwise, use the connection to enter a static secret access key. |  |
| Dynamic Session Token | Use this input to authenticate with AWS if you are using a OPTIONAL dynamically-generated session token. |  |

### List Multipart Uploads

Lists in-progress multipart uploads in a bucket

| Input | Comments | Default |
| --- | --- | --- |
| AWS Region | AWS provides services in multiple regions, like us-west-2 or eu-west-1. |  |
| Connection | The AWS S3 connection to use for authentication. Access keys provide programmatic access to AWS resources. [Learn more](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_access-keys.html). |  |
| Dynamic Access Key ID | Use this input to authenticate with AWS if you are using a dynamically-generated access key. Otherwise, use the connection to enter a static access key ID. |  |
| Dynamic Secret Access Key | Use this input to authenticate with AWS if you are using a dynamically-generated secret access key. Otherwise, use the connection to enter a static secret access key. |  |
| Dynamic Session Token | Use this input to authenticate with AWS if you are using a OPTIONAL dynamically-generated session token. |  |
| Bucket Name | An Amazon S3 'bucket' is a container where files are stored. You can create a bucket from within the AWS console. Bucket names contain only letters, numbers, and dashes. |  |

### List Objects

List Objects in a Bucket

| Input | Comments | Default |
| --- | --- | --- |
| AWS Region | AWS provides services in multiple regions, like us-west-2 or eu-west-1. |  |
| Connection | The AWS S3 connection to use for authentication. Access keys provide programmatic access to AWS resources. [Learn more](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_access-keys.html). |  |
| Dynamic Access Key ID | Use this input to authenticate with AWS if you are using a dynamically-generated access key. Otherwise, use the connection to enter a static access key ID. |  |
| Dynamic Secret Access Key | Use this input to authenticate with AWS if you are using a dynamically-generated secret access key. Otherwise, use the connection to enter a static secret access key. |  |
| Dynamic Session Token | Use this input to authenticate with AWS if you are using a OPTIONAL dynamically-generated session token. |  |
| Bucket Name | An Amazon S3 'bucket' is a container where files are stored. You can create a bucket from within the AWS console. Bucket names contain only letters, numbers, and dashes. |  |
| Prefix | List only objects prefixed with this string. For example, if you only want files in a directory called 'unprocessed', you can enter 'unprocessed/'. If this is left blank, all files in the selected bucket will be listed. |  |
| Max Keys | Maximum number of objects to return (1-1000). Defaults to 1000 if not specified. |  |
| Continuation Token | Pagination token returned by a previous request to retrieve the next page of results. |  |
| Include Metadata | When true, returns full object metadata and pagination information instead of just object keys. | false |

### List Parts

List parts of a multipart upload

| Input | Comments | Default |
| --- | --- | --- |
| AWS Region | AWS provides services in multiple regions, like us-west-2 or eu-west-1. |  |
| Connection | The AWS S3 connection to use for authentication. Access keys provide programmatic access to AWS resources. [Learn more](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_access-keys.html). |  |
| Dynamic Access Key ID | Use this input to authenticate with AWS if you are using a dynamically-generated access key. Otherwise, use the connection to enter a static access key ID. |  |
| Dynamic Secret Access Key | Use this input to authenticate with AWS if you are using a dynamically-generated secret access key. Otherwise, use the connection to enter a static secret access key. |  |
| Dynamic Session Token | Use this input to authenticate with AWS if you are using a OPTIONAL dynamically-generated session token. |  |
| Bucket Name | An Amazon S3 'bucket' is a container where files are stored. You can create a bucket from within the AWS console. Bucket names contain only letters, numbers, and dashes. |  |
| Object Key | An object in S3 is a file that is saved in a 'bucket'. This represents the object's key (file path). Do not include a leading /. |  |
| Upload ID | The unique identifier for the multipart upload, returned by 'Create Multipart Upload' action. |  |

### Put Bucket Notification Configuration

Replace an existing bucket notification configuration with a new one

| Input | Comments | Default |
| --- | --- | --- |
| AWS Region | AWS provides services in multiple regions, like us-west-2 or eu-west-1. |  |
| Connection | The AWS S3 connection to use for authentication. Access keys provide programmatic access to AWS resources. [Learn more](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_access-keys.html). |  |
| Dynamic Access Key ID | Use this input to authenticate with AWS if you are using a dynamically-generated access key. Otherwise, use the connection to enter a static access key ID. |  |
| Dynamic Secret Access Key | Use this input to authenticate with AWS if you are using a dynamically-generated secret access key. Otherwise, use the connection to enter a static secret access key. |  |
| Dynamic Session Token | Use this input to authenticate with AWS if you are using a OPTIONAL dynamically-generated session token. |  |
| Bucket Name | An Amazon S3 'bucket' is a container where files are stored. You can create a bucket from within the AWS console. Bucket names contain only letters, numbers, and dashes. |  |
| Topic Configurations | List of SNS topic configurations for bucket event notifications. For more information, see [S3 Event Notifications](https://docs.aws.amazon.com/AmazonS3/latest/userguide/NotificationHowTo.html). | `[ { &quot;Id&quot;: &quot;topic-1&quot;, &quot;TopicArn&quot;: &quot;arn:aws:sns:us-west-2:123456789012:mytopic&quot;, &quot;Events&quot;: [ &quot;s3:ObjectCreated:*&quot; ], &quot;Filter&quot;: { &quot;Key&quot;: { &quot;FilterRules&quot;: [ { &quot;Name&quot;: &quot;prefix&quot;, &quot;Value&quot;: &quot;images/&quot; } ] } } }]` |
| Queue Configurations | List of SQS queue configurations for bucket event notifications. For more information, see [S3 Event Notifications](https://docs.aws.amazon.com/AmazonS3/latest/userguide/NotificationHowTo.html). | `[ { &quot;Id&quot;: &quot;queue-1&quot;, &quot;QueueArn&quot;: &quot;arn:aws:sqs:us-west-2:123456789012:myqueue&quot;, &quot;Events&quot;: [ &quot;s3:ObjectCreated:*&quot; ], &quot;Filter&quot;: { &quot;Key&quot;: { &quot;FilterRules&quot;: [ { &quot;Name&quot;: &quot;prefix&quot;, &quot;Value&quot;: &quot;images/&quot; } ] } } }]` |
| Lambda Function Configurations | List of Lambda function configurations for bucket event notifications. For more information, see [S3 Event Notifications](https://docs.aws.amazon.com/AmazonS3/latest/userguide/NotificationHowTo.html). | `[ { &quot;Id&quot;: &quot;lambda-1&quot;, &quot;LambdaFunctionArn&quot;: &quot;arn:aws:lambda:us-west-2:123456789012:function:my-function&quot;, &quot;Events&quot;: [ &quot;s3:ObjectCreated:*&quot; ], &quot;Filter&quot;: { &quot;Key&quot;: { &quot;FilterRules&quot;: [ { &quot;Name&quot;: &quot;prefix&quot;, &quot;Value&quot;: &quot;images/&quot; } ] } } }]` |
| EventBridge Configuration | EventBridge configuration for bucket event notifications. For more information, see [Using EventBridge with S3](https://docs.aws.amazon.com/AmazonS3/latest/userguide/EventBridge.html). | `{ &quot;Id&quot;: &quot;event-bridge-1&quot;, &quot;EventBridgeArn&quot;: &quot;arn:aws:eventbridge:us-west-2:123456789012:myeventbridge&quot;, &quot;Events&quot;: [ &quot;s3:ObjectCreated:*&quot; ], &quot;Filter&quot;: { &quot;Key&quot;: { &quot;FilterRules&quot;: [ { &quot;Name&quot;: &quot;prefix&quot;, &quot;Value&quot;: &quot;images/&quot; } ] } }}` |

### Put Object

Write an object to S3

| Input | Comments | Default |
| --- | --- | --- |
| AWS Region | AWS provides services in multiple regions, like us-west-2 or eu-west-1. |  |
| Connection | The AWS S3 connection to use for authentication. Access keys provide programmatic access to AWS resources. [Learn more](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_access-keys.html). |  |
| Dynamic Access Key ID | Use this input to authenticate with AWS if you are using a dynamically-generated access key. Otherwise, use the connection to enter a static access key ID. |  |
| Dynamic Secret Access Key | Use this input to authenticate with AWS if you are using a dynamically-generated secret access key. Otherwise, use the connection to enter a static secret access key. |  |
| Dynamic Session Token | Use this input to authenticate with AWS if you are using a OPTIONAL dynamically-generated session token. |  |
| Bucket Name | An Amazon S3 'bucket' is a container where files are stored. You can create a bucket from within the AWS console. Bucket names contain only letters, numbers, and dashes. |  |
| File Contents | The contents to write to the object. Accepts text strings or binary data (images, PDFs, etc.) from previous steps. |  |
| Object Key | An object in S3 is a file that is saved in a 'bucket'. This represents the object's key (file path). Do not include a leading /. |  |
| Object Tags | Key-value pairs to tag the object for filtering and organization. For more information, see [S3 Object Tagging](https://docs.aws.amazon.com/AmazonS3/latest/userguide/object-tagging.html). |  |
| ACL Permissions | Canned ACL permissions to apply to the object. For more information, see [S3 Canned ACLs](https://docs.aws.amazon.com/AmazonS3/latest/userguide/acl-overview.html#canned-acl). |  |

### Put Object Lock Configuration

Places an Object Lock configuration on the specified bucket

| Input | Comments | Default |
| --- | --- | --- |
| AWS Region | AWS provides services in multiple regions, like us-west-2 or eu-west-1. |  |
| Connection | The AWS S3 connection to use for authentication. Access keys provide programmatic access to AWS resources. [Learn more](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_access-keys.html). |  |
| Dynamic Access Key ID | Use this input to authenticate with AWS if you are using a dynamically-generated access key. Otherwise, use the connection to enter a static access key ID. |  |
| Dynamic Secret Access Key | Use this input to authenticate with AWS if you are using a dynamically-generated secret access key. Otherwise, use the connection to enter a static secret access key. |  |
| Dynamic Session Token | Use this input to authenticate with AWS if you are using a OPTIONAL dynamically-generated session token. |  |
| Bucket Name | An Amazon S3 'bucket' is a container where files are stored. You can create a bucket from within the AWS console. Bucket names contain only letters, numbers, and dashes. |  |
| Default Retention Mode | Object Lock retention mode for new objects. Must be used with either Default Retention Days or Years. For more information, see [S3 Object Lock](https://docs.aws.amazon.com/AmazonS3/latest/userguide/object-lock.html). |  |
| Default Retention Days | Number of days for the default retention period. Mutually exclusive with Default Retention Years. |  |
| Default Retention Years | Number of years for the default retention period. Mutually exclusive with Default Retention Days. |  |

### Put Object Retention

Places an Object Retention configuration on an object

| Input | Comments | Default |
| --- | --- | --- |
| AWS Region | AWS provides services in multiple regions, like us-west-2 or eu-west-1. |  |
| Connection | The AWS S3 connection to use for authentication. Access keys provide programmatic access to AWS resources. [Learn more](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_access-keys.html). |  |
| Dynamic Access Key ID | Use this input to authenticate with AWS if you are using a dynamically-generated access key. Otherwise, use the connection to enter a static access key ID. |  |
| Dynamic Secret Access Key | Use this input to authenticate with AWS if you are using a dynamically-generated secret access key. Otherwise, use the connection to enter a static secret access key. |  |
| Dynamic Session Token | Use this input to authenticate with AWS if you are using a OPTIONAL dynamically-generated session token. |  |
| Bucket Name | An Amazon S3 'bucket' is a container where files are stored. You can create a bucket from within the AWS console. Bucket names contain only letters, numbers, and dashes. |  |
| Object Key | An object in S3 is a file that is saved in a 'bucket'. This represents the object's key (file path). Do not include a leading /. |  |
| Retention Mode | Retention mode for the specified object. Required when Retain Until Date is set. |  |
| Retain Until Date | The date and time when Object Retention expires. Required when using Retention Mode. Must be in ISO 8601 format. |  |
| Version ID | The version ID of the object to apply retention configuration to. Required when versioning is enabled. |  |

### Subscribe to SNS Topic

Subscribe to an Amazon SNS Topic for S3 Event Notifications

| Input | Comments | Default |
| --- | --- | --- |
| AWS Region | AWS provides services in multiple regions, like us-west-2 or eu-west-1. |  |
| SNS Topic ARN | The Amazon Resource Name (ARN) of the SNS topic. For more information, see [SNS ARN Format](https://docs.aws.amazon.com/sns/latest/dg/sns-getting-started.html). |  |
| Webhook Endpoint | The HTTPS endpoint URL that will receive S3 event notifications. |  |
| Connection | The AWS S3 connection to use for authentication. Access keys provide programmatic access to AWS resources. [Learn more](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_access-keys.html). |  |
| Dynamic Access Key ID | Use this input to authenticate with AWS if you are using a dynamically-generated access key. Otherwise, use the connection to enter a static access key ID. |  |
| Dynamic Secret Access Key | Use this input to authenticate with AWS if you are using a dynamically-generated secret access key. Otherwise, use the connection to enter a static secret access key. |  |
| Dynamic Session Token | Use this input to authenticate with AWS if you are using a OPTIONAL dynamically-generated session token. |  |

### Unsubscribe from a SNS Topic

Unsubscribe from an Amazon SNS Topic for S3 Event Notifications

| Input | Comments | Default |
| --- | --- | --- |
| AWS Region | AWS provides services in multiple regions, like us-west-2 or eu-west-1. |  |
| Subscription ARN | The Amazon Resource Name (ARN) of the SNS topic subscription. |  |
| Connection | The AWS S3 connection to use for authentication. Access keys provide programmatic access to AWS resources. [Learn more](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_access-keys.html). |  |
| Dynamic Access Key ID | Use this input to authenticate with AWS if you are using a dynamically-generated access key. Otherwise, use the connection to enter a static access key ID. |  |
| Dynamic Secret Access Key | Use this input to authenticate with AWS if you are using a dynamically-generated secret access key. Otherwise, use the connection to enter a static secret access key. |  |
| Dynamic Session Token | Use this input to authenticate with AWS if you are using a OPTIONAL dynamically-generated session token. |  |

### Update SNS Topic Policy For S3 Event Notification

Update an Amazon SNS Topic Policy to grant S3 permission to publish

| Input | Comments | Default |
| --- | --- | --- |
| AWS Region | AWS provides services in multiple regions, like us-west-2 or eu-west-1. |  |
| Connection | The AWS S3 connection to use for authentication. Access keys provide programmatic access to AWS resources. [Learn more](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_access-keys.html). |  |
| Dynamic Access Key ID | Use this input to authenticate with AWS if you are using a dynamically-generated access key. Otherwise, use the connection to enter a static access key ID. |  |
| Dynamic Secret Access Key | Use this input to authenticate with AWS if you are using a dynamically-generated secret access key. Otherwise, use the connection to enter a static secret access key. |  |
| Dynamic Session Token | Use this input to authenticate with AWS if you are using a OPTIONAL dynamically-generated session token. |  |
| Bucket Name | An Amazon S3 'bucket' is a container where files are stored. You can create a bucket from within the AWS console. Bucket names contain only letters, numbers, and dashes. |  |
| SNS Topic ARN | The Amazon Resource Name (ARN) of the SNS topic. For more information, see [SNS ARN Format](https://docs.aws.amazon.com/sns/latest/dg/sns-getting-started.html). |  |
| Bucket Owner Account ID | The 12-digit AWS Account ID of the bucket owner. Find this in the AWS Console account settings or use the 'Get Current Account' action. |  |

### Upload Part

Upload a chunk of a multipart file upload

| Input | Comments | Default |
| --- | --- | --- |
| Connection | The AWS S3 connection to use for authentication. Access keys provide programmatic access to AWS resources. [Learn more](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_access-keys.html). |  |
| Dynamic Access Key ID | Use this input to authenticate with AWS if you are using a dynamically-generated access key. Otherwise, use the connection to enter a static access key ID. |  |
| Dynamic Secret Access Key | Use this input to authenticate with AWS if you are using a dynamically-generated secret access key. Otherwise, use the connection to enter a static secret access key. |  |
| Dynamic Session Token | Use this input to authenticate with AWS if you are using a OPTIONAL dynamically-generated session token. |  |
| AWS Region | AWS provides services in multiple regions, like us-west-2 or eu-west-1. |  |
| Bucket Name | An Amazon S3 'bucket' is a container where files are stored. You can create a bucket from within the AWS console. Bucket names contain only letters, numbers, and dashes. |  |
| Object Key | An object in S3 is a file that is saved in a 'bucket'. This represents the object's key (file path). Do not include a leading /. |  |
| Upload ID | The unique identifier for the multipart upload, returned by 'Create Multipart Upload' action. |  |
| Part Number | The part number for this chunk in the multipart upload sequence (1-10,000). |  |
| File Chunk | The binary data chunk to upload as part of a multipart upload. Reference output from a previous step. |  |

### Upload Stream - Close Stream

Close an upload stream

| Input | Comments | Default |
| --- | --- | --- |
| Upload Stream ID | The ID of the upload stream to write to. Generate this with the 'Create Stream' action. |  |

### Upload Stream - Create Stream

Create an upload stream to S3

| Input | Comments | Default |
| --- | --- | --- |
| AWS Region | AWS provides services in multiple regions, like us-west-2 or eu-west-1. |  |
| Connection | The AWS S3 connection to use for authentication. Access keys provide programmatic access to AWS resources. [Learn more](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_access-keys.html). |  |
| Dynamic Access Key ID | Use this input to authenticate with AWS if you are using a dynamically-generated access key. Otherwise, use the connection to enter a static access key ID. |  |
| Dynamic Secret Access Key | Use this input to authenticate with AWS if you are using a dynamically-generated secret access key. Otherwise, use the connection to enter a static secret access key. |  |
| Dynamic Session Token | Use this input to authenticate with AWS if you are using a OPTIONAL dynamically-generated session token. |  |
| Object Key | An object in S3 is a file that is saved in a 'bucket'. This represents the object's key (file path). Do not include a leading /. |  |
| Bucket Name | An Amazon S3 'bucket' is a container where files are stored. You can create a bucket from within the AWS console. Bucket names contain only letters, numbers, and dashes. |  |
| Object Tags | Key-value pairs to tag the object for filtering and organization. For more information, see [S3 Object Tagging](https://docs.aws.amazon.com/AmazonS3/latest/userguide/object-tagging.html). |  |
| ACL Permissions | Canned ACL permissions to apply to the object. For more information, see [S3 Canned ACLs](https://docs.aws.amazon.com/AmazonS3/latest/userguide/acl-overview.html#canned-acl). |  |

### Upload Stream - Write Data

Write to an upload stream

| Input | Comments | Default |
| --- | --- | --- |
| Upload Stream ID | The ID of the upload stream to write to. Generate this with the 'Create Stream' action. |  |
| File Contents | The contents to write to the object. Accepts text strings or binary data (images, PDFs, etc.) from previous steps. |  |
