Docs / Contact / connectors/aws-s3
AWS S3
Provider:aws| Service:s3| Direction: Write
Amazon Simple Storage Service connector for writing objects to S3 buckets. In a flow, the connector writes (uploads) an object; it does not read objects back into the flow.
Required Permissions#
The IAM identity used by the connector must have:
| Operation | Required IAM Permissions |
|---|---|
| Write object | s3:PutObject |
Tip: Scope permissions to specific bucket ARNs (e.g., arn:aws:s3:::my-bucket/*) to follow the principle of least privilege.
Operation#
When a message reaches this connector, it writes an object to the configured bucket. The payload must supply:
| Payload field | Required | Description |
|---|---|---|
path |
Yes | Object key/path within the bucket |
content |
Yes | Object content to upload |
Connector Configuration#
The connector is created with type: "cloud", provider: "aws", service_type: "s3", plus:
Field (config) |
Required | Description |
|---|---|---|
region |
Yes | AWS region code (e.g., us-east-1). For some services the region can be derived from an ARN, but providing it is recommended. |
access_key |
Yes | AWS access key. |
secret_key |
Yes | AWS secret key. |
bucket |
Yes | S3 bucket name |
Output#
On success the flow step records:
json
{
"status": "completed",
"statusCode": 200,
"data": {
"status": "uploaded",
"statusCode": 200,
"method": "S3_PUT_OBJECT",
"endpoint": "s3://my-bucket/path/to/file.json",
"duration": 42,
"response": { "path": "path/to/file.json", "bucket": "my-bucket" }
}
}
Example#
Connector config (API key):
json
{
"type": "cloud",
"provider": "aws",
"service_type": "s3",
"region": "us-east-1",
"access_key": "${secrets.aws_access_key}",
"secret_key": "${secrets.aws_secret_key}",
"bucket": "my-data-bucket"
}
Tendrl