AWS S3 connector
Amazon Simple Storage Service (S3) is an object storage service that offers industry-leading scalability, data availability, security, and performance. The AWS S3 connector allows you to retrieve and modify your AWS S3 resources.
Requirements
AWS account with S3 and IAM services enabled.
Revoke Access
To revoke access the user must delete the associated trust policy or IAM role created at connection creation time.
Authorize your account
When you add an AWS S3 card to a flow for the first time, you'll be prompted to configure the connection. This enables you to connect your AWS account, save your account information, and reuse the connection for future AWS S3 flows. See Authorization.
AWS S3 connector action cards
|
Action |
Description |
|---|---|
|
Creates a copy of an object that is already stored in AWS S3. |
|
|
Creates a new AWS S3 bucket. |
|
|
Make a custom, authenticated HTTP call to the AWS API. |
|
|
Deletes a specified AWS S3 bucket. |
|
|
Deletes an object in a specified AWS S3 bucket. |
|
|
Download an object in a specified AWS S3 bucket. |
|
|
Retrieve metadata of an object in AWS S3. |
|
|
Read tags associated with an object in AWS S3. |
|
|
Search buckets owned by the authenticated user in AWS S3. |
|
|
Search objects in a specified bucket in AWS S3. |
|
|
Sets the supplied tag-set to an object that already exists in a bucket. |
|
|
Upload an object to a bucket in AWS S3. |
Supported scopes
The AWS S3 connector requires the following AWS permissions.
|
Action |
Scope |
|---|---|
|
s3:ListBucket s3:GetObject s3:PutObject s3:PutObjectAcl s3:PutObjectTagging s3:PutObjectVersionTagging s3:GetObjectVersion s3:GetObjectTagging s3:GetObjectLegalHold s3:GetObjectRetention s3:BypassGovernanceRetention s3:PutBucketObjectLockConfiguration s3:PutObjectLegalHold s3:PutObjectRetention |
|
|
s3:CreateBucket s3:PutBucketAcl s3:PutBucketObjectLockConfiguration s3:PutBucketVersioning s3:PutBucketOwnershipControls |
|
|
s3:DeleteBucket |
|
|
s3:BypassGovernanceRetention s3:DeleteObject s3:DeleteObjectVersion s3:PutLifeCycleConfiguration |
|
|
s3:GetObject s3:GetObjectVersion s3:ListBucket |
|
|
s3:GetObject s3:GetObjectVersion s3:ListBucket s3:GetObjectLegalHold s3:GetObjectRetention |
|
|
s3:GetObjectTagging s3:GetObjectVersionTagging |
|
|
s3:ListAllMyBuckets |
|
|
s3:ListBucket |
|
|
s3:PutObjectTagging s3:PutObjectVersionTagging |
|
| Upload Object |
s3:PutObject s3:PutObjectAcl s3:PutObjectTagging s3:PutObjectLegalHold s3:PutBucketObjectLockConfiguration s3:PutObjectRetention kms:GenerateDataKey |
Server Side Encryption is abbreviated to SSE for the AWS S3 card fields.