Amazon S3 Connector

Source API Docs API Changelog Connector Changelog

Description

Amazon S3 is an object storage service from Amazon Web Services (AWS). This component allows creating, reading, updating, moving, listing, and deleting objects (files) within an Amazon S3 bucket.

API Documentation

This component was built using the Amazon S3 API Reference.

A common integration pattern involves listing files in a file store, and performing a series of actions on the array of files that are returned. See our looping over files quickstart for information about how to create a loop over an array of files.

Listening for file changes

Amazon Simple Notification Service (SNS) can be used to listen for file changes in S3. Our GitHub examples repo contains an example integration that illustrates how to listen for file changes in S3 and perform an action when a file is added or updated; it can be imported and tried out.

Example Integration

The example integration contains three flows:

Create and configure SNS topic runs when an instance is deployed and will create an SNS topic and configure it to listen for new files added to S3. It instructs SNS to notify the Receive SNS Notifications flow when a new file is added to an S3 bucket that a user selected as part of the configuration wizard.
Receive SNS Notifications will receive the SNS notification and extract the S3 bucket and key from the message. It will fetch the file that was added. From there, the file can be processed or sent to another system.
Remove SNS Topic will remove the SNS topic that was created in the first flow when an instance is deleted.

Streaming large files to S3

Amazon S3 offers a feature called multipart upload that allows uploading large files in parts. This component supports multipart uploads in two ways:

File Streaming: This is useful when looping over a paginated API and streaming the response to S3 as a CSV (or similar) file. This option is useful when there is a large number of records to process and loading all of them into memory at once should be avoided (which can cause an out-of-memory error). When the Upload Stream actions are used, the component automatically handles the multipart upload. Within the integration:
- Run a Create Upload Stream action to create a new file stream.
- Loop over the records to write to the file.
  - For each record, run a Write Upload Stream action to write the record to the file stream.
- Run a Close Upload Stream action to close the file stream and upload the file to S3.
Multipart Upload: This is useful if a file is already split into parts that need to be uploaded to S3 and then joined together. Within the integration:
- Run a Create Multipart Upload action to start a new multipart upload.
- Run a Generate Presigned URL for Multipart Uploads action to generate a presigned URL for each part.
- Run an HTTP component Post action to post each part to the presigned URL.
- Run a Complete Multipart Upload to complete the multipart upload.
This option requires manually handling the multipart upload process and abiding by the restrictions that Amazon S3 imposes on multipart uploads (like each part being at least 5MB in size, with the exception of the last part).

Connections

AWS S3 Access Key and Secret

key: apiKeySecret

An AWS IAM access key pair is required to interact with Amazon S3. Ensure the key pair generated in AWS has proper permissions to the S3 resources to access. Read more about S3 IAM actions in the AWS documentation.

Prerequisites

An AWS account with IAM access
Appropriate permissions to create IAM access keys

Setup Steps

To create an IAM access key pair:

Sign in to the AWS Console and navigate to Identity and Access Management (IAM)
Select the IAM user that will be used for the integration
Navigate to the Security credentials tab
Under the Access keys section, select Create access key
Choose the appropriate use case (e.g., Third-party service or Application running outside AWS)
Copy both the Access Key ID and Secret Access Key when displayed

Secret Key Visibility

The Secret Access Key is only shown once during creation. If it is not copied at this time, a new access key pair must be created.

Configure the Connection

Enter the Access Key ID into the connection configuration
Enter the Secret Access Key into the connection configuration

Input	Notes	Example
Access Key ID	AWS IAM Access Key ID used for programmatic access. Create access keys in the AWS IAM Console under Security Credentials.	AKIAIOSFODNN7EXAMPLE
Secret Access Key	AWS IAM Secret Access Key paired with the Access Key ID. <strong>Important:</strong> This value is only shown once when created in the AWS IAM Console.	wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY

AWS Role ARN

key: awsAssumeRole

AWS Assume Role authentication allows assuming an IAM role using temporary security credentials. This method is useful for cross account access or when implementing principle of least privilege.

Refer to the AWS documentation on assuming roles for detailed information.

Prerequisites

Completed API Key Secret connection setup (access key pair required)
Appropriate permissions to create IAM roles

Setup Steps

An IAM user with access keys is required to assume a role. If access keys have not been created, follow the API Key Secret setup steps first, then return here to create the IAM role.

Create an IAM Role with Trust Policy

From the IAM Console, navigate to Roles and select Create Role
Select Custom trust policy as the trusted entity type
Enter the trust policy below, replacing USER_ARN with the IAM user ARN:

View trust policy template

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Principal": {
        "AWS": "USER_ARN"
      },
      "Action": "sts:AssumeRole"
    }
  ]
}

Click Next and attach the appropriate S3 permissions policy (e.g., AmazonS3FullAccess or AmazonS3ReadOnlyAccess)
Complete the remaining steps and select Create Role
Copy the Role ARN from the role summary (format: arn:aws:iam::123456789012:role/role-name)

Configure the Connection

Role ARN: The ARN of the IAM role to assume
Access Key ID: From the IAM user (see API Key Secret)
Secret Access Key: From the IAM user
External ID (optional): Shared secret for enhanced security

External ID

The External ID provides additional security for cross-account access. Refer to the AWS documentation for more information.

Verify Connection

The IAM user credentials assume the role, which provides temporary credentials with the role's attached permissions. Ensure the trust policy correctly references the IAM user ARN.

Input	Notes	Example
Access Key ID	An AWS IAM Access Key ID	AKIAIOSFODNN7EXAMPLE
External ID	Provides enhanced security measures to the connection. Optional, but recommended. Please check AWS docs for more information.	shared-common-secret
Role ARN	An AWS IAM Role ARN	arn:aws:iam::OtherAccount-ID:role/assumed-role-name
Secret Access Key	An AWS IAM Secret Access Key	wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY

Triggers

New and Updated Files

Checks for new and updated files in a specified S3 bucket on a configured schedule. | key: pollChangesFilesTrigger

Input	Notes	Example
Connection	The AWS S3 connection to use for authentication. Access keys provide programmatic access to AWS resources. Learn more.
AWS Region	AWS provides services in multiple regions, like us-west-2 or eu-west-1.	us-east-1
Bucket Name	An Amazon S3 'bucket' is a container where files are stored. Buckets can be created from within the AWS console. Bucket names contain only letters, numbers, and dashes.	my-s3-bucket-abc123
Dynamic Access Key ID	Use this input to authenticate with AWS if you are using a dynamically-generated access key. Otherwise, use the connection to enter a static access key ID.
Dynamic Secret Access Key	Use this input to authenticate with AWS if you are using a dynamically-generated secret access key. Otherwise, use the connection to enter a static secret access key.
Dynamic Session Token	Use this input to authenticate with AWS if you are using a OPTIONAL dynamically-generated session token.
Look-back Date	The date the initial sync starts from, in YYYY-MM-DD format. Cannot be a future date. Leave empty to start from the first recurrence with no backfill. When set, the initial sync seeds each file modified on or after this date once.	2026-01-01

The New and Updated Files trigger checks for new and updated files in a specified S3 bucket on a configured schedule. It monitors file changes based on the LastModified timestamp of objects.

For more information on S3 objects, see Working with Amazon S3 objects.

How It Works

Run on the configured schedule (e.g., every 5 minutes)
List every object in the bucket using the ListObjectsV2 API, paging through the bucket 1,000 keys per request, each request resuming after the last key of the previous one, until IsTruncated is false
Compare each object's LastModified timestamp against the polled window, which runs from the last poll time up to the start of the current second
Return keys for any files modified within that window
Maintain state to track the last poll time automatically

Look-back Date controls the first recurrence, before any position is stored. Left empty, the trigger records the current time and returns nothing; polling begins incrementally from the next recurrence. Set, the first recurrence runs as a one-time initial sync, returning every file whose LastModified is on or after that date; every other input behaves exactly as it does on a normal recurrence.

Every window, the initial sync included, closes at the start of the second in which the recurrence began. Amazon S3 reports LastModified to the second, so a file modified during that second, or while the listing is in progress, falls in the next recurrence's window rather than being missed. Once a window is fully listed, the trigger stores its end as the next position, exactly as it does on every other recurrence.

Batching

Batching is enabled per flow on this trigger: each changed file is dispatched as its own execution, or grouped by the configured batch size. Batch size and batch concurrency can both be overridden per instance. Raising concurrency increases the request volume sent to Amazon S3.

Batching also changes how the bucket is read. With batching off, each recurrence lists the whole bucket in one pass before returning. With batching on, the trigger lists one page of up to 1,000 keys at a time and returns that page's changed files before reading the next, so a large bucket never has to be held at once. The whole window is still listed within the same recurrence, and its position is stored only after the last page. If the recurrence stops partway, the next one resumes from the last page it reached.

To turn it on, select the flow's trigger, open the Flow control tab, and switch on Enable Batching. Under Batch Size, keep Trigger default or choose Custom batch size. Batch Concurrency is optional; leave it blank for no batch-level limit.

Enabling batching changes the payload a downstream step receives. With batching off a step reads data, an array of keys; with batching on that array does not exist and data is a single changeType/record item, or an array of them (see Returned Data with Batching). Any step reading the older shape must be updated before batching is enabled. Because batching is per flow, this affects only that flow, not the component or other flows using the same trigger.

Returned Data

The trigger returns an array of object keys (file paths) that have been created or modified since the last poll. When no changes are detected, returns an empty array and sets polledNoChanges to true.

View example response

{
  "data": [
    "path/to/new-file.txt",
    "path/to/updated-file.pdf",
    "images/photo.jpg"
  ]
}

Fields shown are representative. The full response object includes additional properties.

Returned Data with Batching

Batching replaces the array above with keys already tagged by how they changed, so a step never has to work out which item is which. Amazon S3 exposes only a single LastModified timestamp per object, so a key cannot be told apart as newly created versus modified; every item is tagged changed.

With Batch Size set to 1, each execution receives a single tagged key:

Example Payload: batching enabled, batch size 1

{
  "data": {
    "changeType": "changed",
    "record": "path/to/new-file.txt"
  }
}

With Batch Size greater than 1, each execution receives an array holding up to that many tagged keys:

Example Payload: batching enabled, batch size 3

{
  "data": [
    { "changeType": "changed", "record": "path/to/new-file.txt" },
    { "changeType": "changed", "record": "path/to/updated-file.pdf" },
    { "changeType": "changed", "record": "images/photo.jpg" }
  ]
}

Best Practices

Polling Frequency: Use 5-15 minute intervals for active buckets; longer intervals for low-activity buckets
Bucket Size: The trigger lists the entire bucket on every poll, issuing one ListObjectsV2 request per 1,000 objects. Very large buckets mean many list requests on every poll; consider monitoring a narrower bucket, or using the Webhook trigger with SNS notifications instead
Permissions: The IAM credentials require s3:ListBucket permission on the bucket

Limitations

Large file uploads: For multipart uploads, Amazon S3 sets LastModified to the time the upload started, not when it finished (see Working with object metadata). A file whose multipart upload is still in progress when a poll runs may never be returned. For buckets that receive large uploads, use the Webhook trigger with SNS notifications, which fires when the upload completes

Example Payload for New and Updated Files⤓

Loading…

New Buckets

Checks for new buckets in Amazon S3 on a configured schedule. | key: pollNewBucketsTrigger

Input	Notes	Example
Connection	The AWS S3 connection to use for authentication. Access keys provide programmatic access to AWS resources. Learn more.
AWS Region	AWS provides services in multiple regions, like us-west-2 or eu-west-1.	us-east-1
Dynamic Access Key ID	Use this input to authenticate with AWS if you are using a dynamically-generated access key. Otherwise, use the connection to enter a static access key ID.
Dynamic Secret Access Key	Use this input to authenticate with AWS if you are using a dynamically-generated secret access key. Otherwise, use the connection to enter a static secret access key.
Dynamic Session Token	Use this input to authenticate with AWS if you are using a OPTIONAL dynamically-generated session token.
Look-back Date	The date the initial sync starts from, in YYYY-MM-DD format. Cannot be a future date. Leave empty to start from the first recurrence with no backfill. When set, the initial sync seeds each bucket created on or after this date once.	2026-01-01

The New Buckets trigger checks for new buckets in Amazon S3 on a configured schedule. It monitors bucket creation based on the CreationDate of each bucket.

For more information on S3 buckets, see Working with Amazon S3 buckets.

How It Works

Run on the configured schedule (e.g., every 5 minutes)
List every bucket owned by the account using the ListBuckets API, paging with ContinuationToken until no more pages remain
Compare each bucket's CreationDate against the last poll time
Return the buckets created since the last poll
Maintain state to track the last poll time automatically

Look-back Date controls the first recurrence, before any position is stored. Left empty, the trigger records the current time and returns nothing; polling begins incrementally from the next recurrence. Set, the first recurrence runs as a one-time initial sync, returning every bucket whose CreationDate is on or after that date; every other input behaves exactly as it does on a normal recurrence.

The sync has no fixed upper bound: every recurrence lists every bucket on the account and filters only by a lower bound, so a bucket created while the sync's listing is in progress is included rather than deferred to a later recurrence. It always completes within a single recurrence; batching does not change that, only how the returned buckets are dispatched downstream. Once the listing completes, the trigger stores the wall-clock time as its next position, exactly as it does on every other recurrence.

Batching

Batching is enabled per flow on this trigger: each new bucket is dispatched as its own execution, or grouped by the configured batch size. Batch size and batch concurrency can both be overridden per instance. Raising concurrency increases the request volume sent to Amazon S3.

Enabling batching changes the payload a downstream step receives. With batching off a step reads data, an array of buckets; with batching on that array does not exist and data is a single changeType/record item, or an array of them (see Returned Data with Batching). Any step reading the older shape must be updated before batching is enabled. Because batching is per flow, this affects only that flow, not the component or other flows using the same trigger.

Returned Data

The trigger returns an array of buckets created since the last poll, with CreationDate normalized to an ISO 8601 string. When no changes are detected, returns an empty array and sets polledNoChanges to true.

View example response

{
  "data": [
    {
      "Name": "bucket-1",
      "CreationDate": "2024-03-08T23:30:22.000Z"
    }
  ]
}

Fields shown are representative. The full response object includes additional properties.

Returned Data with Batching

Batching replaces the array above with buckets already tagged by how they changed, so a step never has to work out which item is which. This trigger reports only new buckets, so every item is tagged created.

With Batch Size set to 1, each execution receives a single tagged bucket:

Example Payload: batching enabled, batch size 1

{
  "data": {
    "changeType": "created",
    "record": {
      "Name": "bucket-1",
      "CreationDate": "2024-03-08T23:30:22.000Z"
    }
  }
}

With Batch Size greater than 1, each execution receives an array holding up to that many tagged buckets:

Example Payload: batching enabled, batch size 2

{
  "data": [
    {
      "changeType": "created",
      "record": {
        "Name": "bucket-1",
        "CreationDate": "2024-03-08T23:30:22.000Z"
      }
    },
    {
      "changeType": "created",
      "record": {
        "Name": "bucket-2",
        "CreationDate": "2024-03-09T02:15:00.000Z"
      }
    }
  ]
}

Best Practices

Polling Frequency: Use 5-15 minute intervals; bucket creation is a low-frequency event for most accounts
Permissions: The IAM credentials require s3:ListAllMyBuckets permission on the account

Example Payload for New Buckets⤓

Loading…

Webhook

Receive Amazon SNS notifications for Amazon S3 events. Confirms SNS subscription requests automatically. | key: snsS3NotificationWebhook

Input	Notes	Example
Topic ARN	The Amazon SNS Topic ARN this webhook should accept messages from. When set, a validly signed message from any other topic is rejected, including a subscription confirmation, so a foreign subscription is never confirmed. Leave empty to accept a validly signed message from any topic.	arn:aws:sns:us-west-2:123456789012:MyTopic

The Webhook trigger receives event notifications from Amazon S3 via Amazon SNS when changes occur in a monitored S3 bucket. It handles both subscription confirmation and notification events automatically.

For real-time notifications without polling delays, use this trigger instead of the New and Updated Files polling trigger.

How It Works

When an SNS topic subscribes to the flow URL, AWS sends a SubscriptionConfirmation message
The trigger automatically confirms the subscription by requesting the SubscribeURL
After confirmation, the trigger receives Notification messages containing S3 event data
Messages are routed to the appropriate branch based on type

Branch Logic

This trigger uses branching to route different message types:

Subscribe: Routes SNS subscription confirmation messages (automatically confirmed)
Notification: Routes S3 event notifications containing bucket and object information

Configuration

To configure S3 event notifications:

Create an SNS topic using the Create SNS Topic for S3 Event Notification action
Update the topic policy using the Update SNS Topic Policy for S3 Event Notification action
Subscribe to the topic using the Subscribe to SNS Topic action with the flow URL as the endpoint
Configure bucket notifications using the Add Bucket SNS Event Notification action

A full list of supported S3 event types is available in the Event notification types documentation.

Returned Data

The trigger returns the parsed SNS message in the payload body. The Message field contains a JSON string with S3 event records that can be parsed for bucket name, object key, and event type.

View example response

{
  "Type": "Notification",
  "MessageId": "22b80b92-fdea-4c2c-8f9d-bdfb0c7bf324",
  "TopicArn": "arn:aws:sns:us-east-2:123456789012:MyTopic",
  "Subject": "Amazon S3 Notification",
  "Message": "{\"Records\":[{\"eventName\":\"ObjectCreated:Put\",\"s3\":{\"bucket\":{\"name\":\"my-bucket\"},\"object\":{\"key\":\"test-file.txt\"}}}]}"
}

Best Practices

Region: The SNS topic must be in the same AWS region as the S3 bucket
Topic Type: Use standard SNS topics; FIFO topics are not supported for S3 notifications
Delivery: Notifications are delivered at least once but may arrive out of order or as duplicates

Example Payload for Webhook⤓

Loading…

Data Sources

Select AWS Region

Select an AWS region | key: selectRegion | type: picklist

Select Bucket

A picklist of buckets in the AWS account. | key: selectBucket | type: picklist

Input	Notes	Example
Connection	The AWS S3 connection to use for authentication. Access keys provide programmatic access to AWS resources. Learn more.
Dynamic Access Key ID	Use this input to authenticate with AWS if you are using a dynamically-generated access key. Otherwise, use the connection to enter a static access key ID.
Dynamic Secret Access Key	Use this input to authenticate with AWS if you are using a dynamically-generated secret access key. Otherwise, use the connection to enter a static secret access key.
Dynamic Session Token	Use this input to authenticate with AWS if you are using a OPTIONAL dynamically-generated session token.

Example Payload for Select Bucket⤓

Loading…

Actions

Abort Multipart Upload

Abort a multipart upload | key: abortMultipartUpload

Input	Notes	Example
Connection	The AWS S3 connection to use for authentication. Access keys provide programmatic access to AWS resources. Learn more.
AWS Region	AWS provides services in multiple regions, like us-west-2 or eu-west-1.	us-east-1
Bucket Name	An Amazon S3 'bucket' is a container where files are stored. Buckets can be created from within the AWS console. Bucket names contain only letters, numbers, and dashes.	my-s3-bucket-abc123
Dynamic Access Key ID	Use this input to authenticate with AWS if you are using a dynamically-generated access key. Otherwise, use the connection to enter a static access key ID.
Dynamic Secret Access Key	Use this input to authenticate with AWS if you are using a dynamically-generated secret access key. Otherwise, use the connection to enter a static secret access key.
Dynamic Session Token	Use this input to authenticate with AWS if you are using a OPTIONAL dynamically-generated session token.
Object Key	An object in S3 is a file that is saved in a 'bucket'. This represents the object's key (file path). Do not include a leading /.	path/to/file.txt
Upload ID	The unique identifier for the multipart upload, returned by 'Create Multipart Upload' action.	xadcOB_7YPBOJuoFiQ9cz4P3Pe6FIZwO4f7wN93uHsNBEw97pl5eNwzExg0LAT2dUN91cOmrEQHDsP3WA60CEg

Example Payload for Abort Multipart Upload⤓

Loading…

Add Bucket SNS Event Notification

Add events to send notifications to SNS Topic | key: bucketEventTriggerConfiguration

Input	Notes	Example
Connection	The AWS S3 connection to use for authentication. Access keys provide programmatic access to AWS resources. Learn more.
AWS Region	AWS provides services in multiple regions, like us-west-2 or eu-west-1.	us-east-1
Bucket Name	An Amazon S3 'bucket' is a container where files are stored. Buckets can be created from within the AWS console. Bucket names contain only letters, numbers, and dashes.	my-s3-bucket-abc123
Bucket Owner Account ID	The 12-digit AWS Account ID of the bucket owner. Find this in the AWS Console account settings or use the 'Get Current Account' action.	123456789012
Dynamic Access Key ID	Use this input to authenticate with AWS if you are using a dynamically-generated access key. Otherwise, use the connection to enter a static access key ID.
Dynamic Secret Access Key	Use this input to authenticate with AWS if you are using a dynamically-generated secret access key. Otherwise, use the connection to enter a static secret access key.
Dynamic Session Token	Use this input to authenticate with AWS if you are using a OPTIONAL dynamically-generated session token.
Event Notification Name	A unique name for the event notification configuration.	S3ObjectCreatedAlert
Event Types	S3 event types that will trigger notifications. For more information, see S3 Event Notification Types.	s3:ObjectCreated:*
SNS Topic ARN	The Amazon Resource Name (ARN) of the SNS topic. For more information, see Getting started with Amazon SNS.	arn:aws:sns:us-east-1:123456789012:S3EventNotifications

Example Payload for Add Bucket SNS Event Notification⤓

Loading…

Close Upload Stream

Close an upload stream | key: closeUploadStream

Input	Notes	Example
Upload Stream ID	The ID of the upload stream to write to. Generate this with the 'Create Stream' action.

Example Payload for Close Upload Stream⤓

Loading…

Complete Multipart Upload

Complete a multipart upload | key: completeMultipartUpload

Input	Notes	Example
Connection	The AWS S3 connection to use for authentication. Access keys provide programmatic access to AWS resources. Learn more.
AWS Region	AWS provides services in multiple regions, like us-west-2 or eu-west-1.	us-east-1
Bucket Name	An Amazon S3 'bucket' is a container where files are stored. Buckets can be created from within the AWS console. Bucket names contain only letters, numbers, and dashes.	my-s3-bucket-abc123
Dynamic Access Key ID	Use this input to authenticate with AWS if you are using a dynamically-generated access key. Otherwise, use the connection to enter a static access key ID.
Dynamic Secret Access Key	Use this input to authenticate with AWS if you are using a dynamically-generated secret access key. Otherwise, use the connection to enter a static secret access key.
Dynamic Session Token	Use this input to authenticate with AWS if you are using a OPTIONAL dynamically-generated session token.
Object Key	An object in S3 is a file that is saved in a 'bucket'. This represents the object's key (file path). Do not include a leading /.	path/to/file.txt
Parts	The list of uploaded parts to complete the multipart upload. Reference the 'Parts' field from the 'List Parts' action output.
Upload ID	The unique identifier for the multipart upload, returned by 'Create Multipart Upload' action.	xadcOB_7YPBOJuoFiQ9cz4P3Pe6FIZwO4f7wN93uHsNBEw97pl5eNwzExg0LAT2dUN91cOmrEQHDsP3WA60CEg

Example Payload for Complete Multipart Upload⤓

Loading…

Copy Object

Copy an object in S3 from one location to another | key: copyObject

Input	Notes	Example
Connection	The AWS S3 connection to use for authentication. Access keys provide programmatic access to AWS resources. Learn more.
ACL Permissions	Canned ACL permissions to apply to the object. For more information, see S3 Canned ACLs.
AWS Region	AWS provides services in multiple regions, like us-west-2 or eu-west-1.	us-east-1
Destination Bucket Name	The destination bucket where the object will be copied. For same-bucket copies, use the same name for both source and destination buckets.	my-company-archive
Destination Key	The destination object's key (file path) to copy to. Do not include a leading /.	archive/2024/database-backup.sql
Dynamic Access Key ID	Use this input to authenticate with AWS if you are using a dynamically-generated access key. Otherwise, use the connection to enter a static access key ID.
Dynamic Secret Access Key	Use this input to authenticate with AWS if you are using a dynamically-generated secret access key. Otherwise, use the connection to enter a static secret access key.
Dynamic Session Token	Use this input to authenticate with AWS if you are using a OPTIONAL dynamically-generated session token.
Source Bucket Name	The source bucket containing the object to copy. For same-bucket copies, use the same name for both source and destination buckets.	my-company-data-prod
Source Key	The source object's key (file path) to copy from. Do not include a leading /.	backups/2024/database-backup.sql

Example Payload for Copy Object⤓

Loading…

Create Multipart Upload

Create a multipart upload | key: createMultipartUpload

Input	Notes	Example
Connection	The AWS S3 connection to use for authentication. Access keys provide programmatic access to AWS resources. Learn more.
ACL Permissions	Canned ACL permissions to apply to the object. For more information, see S3 Canned ACLs.
AWS Region	AWS provides services in multiple regions, like us-west-2 or eu-west-1.	us-east-1
Bucket Name	An Amazon S3 'bucket' is a container where files are stored. Buckets can be created from within the AWS console. Bucket names contain only letters, numbers, and dashes.	my-s3-bucket-abc123
Dynamic Access Key ID	Use this input to authenticate with AWS if you are using a dynamically-generated access key. Otherwise, use the connection to enter a static access key ID.
Dynamic Secret Access Key	Use this input to authenticate with AWS if you are using a dynamically-generated secret access key. Otherwise, use the connection to enter a static secret access key.
Dynamic Session Token	Use this input to authenticate with AWS if you are using a OPTIONAL dynamically-generated session token.
Object Key	An object in S3 is a file that is saved in a 'bucket'. This represents the object's key (file path). Do not include a leading /.	path/to/file.txt
Object Tags	Key-value pairs to tag the object for filtering and organization. For more information, see S3 Object Tagging.	Environment, Production

Example Payload for Create Multipart Upload⤓

Loading…

Create SNS Topic for S3 Event Notification

Create an Amazon SNS Topic to be used with S3 Event Notifications | key: createTopic

Input	Notes	Example
Connection	The AWS S3 connection to use for authentication. Access keys provide programmatic access to AWS resources. Learn more.
AWS Region	AWS provides services in multiple regions, like us-west-2 or eu-west-1.	us-east-1
Dynamic Access Key ID	Use this input to authenticate with AWS if you are using a dynamically-generated access key. Otherwise, use the connection to enter a static access key ID.
Dynamic Secret Access Key	Use this input to authenticate with AWS if you are using a dynamically-generated secret access key. Otherwise, use the connection to enter a static secret access key.
Dynamic Session Token	Use this input to authenticate with AWS if you are using a OPTIONAL dynamically-generated session token.
Name	The name of the SNS topic to create.	ProductionNotifications

Example Payload for Create SNS Topic for S3 Event Notification⤓

Loading…

Create Upload Stream

Create an upload stream to S3 | key: createUploadStream

Input	Notes	Example
Connection	The AWS S3 connection to use for authentication. Access keys provide programmatic access to AWS resources. Learn more.
ACL Permissions	Canned ACL permissions to apply to the object. For more information, see S3 Canned ACLs.
AWS Region	AWS provides services in multiple regions, like us-west-2 or eu-west-1.	us-east-1
Bucket Name	An Amazon S3 'bucket' is a container where files are stored. Buckets can be created from within the AWS console. Bucket names contain only letters, numbers, and dashes.	my-s3-bucket-abc123
Dynamic Access Key ID	Use this input to authenticate with AWS if you are using a dynamically-generated access key. Otherwise, use the connection to enter a static access key ID.
Dynamic Secret Access Key	Use this input to authenticate with AWS if you are using a dynamically-generated secret access key. Otherwise, use the connection to enter a static secret access key.
Dynamic Session Token	Use this input to authenticate with AWS if you are using a OPTIONAL dynamically-generated session token.
Object Key	An object in S3 is a file that is saved in a 'bucket'. This represents the object's key (file path). Do not include a leading /.	path/to/file.txt
Object Tags	Key-value pairs to tag the object for filtering and organization. For more information, see S3 Object Tagging.	Environment, Production

Example Payload for Create Upload Stream⤓

Loading…

Delete Bucket

Deletes the S3 bucket. All objects in the bucket must be deleted before the bucket itself can be deleted | key: deleteBucket

Input	Notes	Example
Connection	The AWS S3 connection to use for authentication. Access keys provide programmatic access to AWS resources. Learn more.
AWS Region	AWS provides services in multiple regions, like us-west-2 or eu-west-1.	us-east-1
Bucket Name	An Amazon S3 'bucket' is a container where files are stored. Buckets can be created from within the AWS console. Bucket names contain only letters, numbers, and dashes.	my-s3-bucket-abc123
Dynamic Access Key ID	Use this input to authenticate with AWS if you are using a dynamically-generated access key. Otherwise, use the connection to enter a static access key ID.
Dynamic Secret Access Key	Use this input to authenticate with AWS if you are using a dynamically-generated secret access key. Otherwise, use the connection to enter a static secret access key.
Dynamic Session Token	Use this input to authenticate with AWS if you are using a OPTIONAL dynamically-generated session token.

Example Payload for Delete Bucket⤓

Loading…

Delete Object

Delete an Object within an S3 Bucket | key: deleteObject

Input	Notes	Example
Connection	The AWS S3 connection to use for authentication. Access keys provide programmatic access to AWS resources. Learn more.
AWS Region	AWS provides services in multiple regions, like us-west-2 or eu-west-1.	us-east-1
Bucket Name	An Amazon S3 'bucket' is a container where files are stored. Buckets can be created from within the AWS console. Bucket names contain only letters, numbers, and dashes.	my-s3-bucket-abc123
Dynamic Access Key ID	Use this input to authenticate with AWS if you are using a dynamically-generated access key. Otherwise, use the connection to enter a static access key ID.
Dynamic Secret Access Key	Use this input to authenticate with AWS if you are using a dynamically-generated secret access key. Otherwise, use the connection to enter a static secret access key.
Dynamic Session Token	Use this input to authenticate with AWS if you are using a OPTIONAL dynamically-generated session token.
Object Key	An object in S3 is a file that is saved in a 'bucket'. This represents the object's key (file path). Do not include a leading /.	path/to/file.txt

Example Payload for Delete Object⤓

Loading…

Delete Objects

Delete multiple objects from a bucket | key: deleteObjects

Input	Notes	Example
Connection	The AWS S3 connection to use for authentication. Access keys provide programmatic access to AWS resources. Learn more.
AWS Region	AWS provides services in multiple regions, like us-west-2 or eu-west-1.	us-east-1
Bucket Name	An Amazon S3 'bucket' is a container where files are stored. Buckets can be created from within the AWS console. Bucket names contain only letters, numbers, and dashes.	my-s3-bucket-abc123
Dynamic Access Key ID	Use this input to authenticate with AWS if you are using a dynamically-generated access key. Otherwise, use the connection to enter a static access key ID.
Dynamic Secret Access Key	Use this input to authenticate with AWS if you are using a dynamically-generated secret access key. Otherwise, use the connection to enter a static secret access key.
Dynamic Session Token	Use this input to authenticate with AWS if you are using a OPTIONAL dynamically-generated session token.
Object Keys	A list of object keys to delete. These are the file paths of the objects to delete. Do not include a leading /.	path/to/file1.txt

Example Payload for Delete Objects⤓

Loading…

Generate Presigned URL

Generate a presigned URL that can be used to upload or download an object in S3 | key: generatePresignedUrl

Input	Notes	Example
Connection	The AWS S3 connection to use for authentication. Access keys provide programmatic access to AWS resources. Learn more.
Action Type	Specifies whether the presigned URL will allow download or upload operations.	download
AWS Region	AWS provides services in multiple regions, like us-west-2 or eu-west-1.	us-east-1
Bucket Name	An Amazon S3 'bucket' is a container where files are stored. Buckets can be created from within the AWS console. Bucket names contain only letters, numbers, and dashes.	my-s3-bucket-abc123
Dynamic Access Key ID	Use this input to authenticate with AWS if you are using a dynamically-generated access key. Otherwise, use the connection to enter a static access key ID.
Dynamic Secret Access Key	Use this input to authenticate with AWS if you are using a dynamically-generated secret access key. Otherwise, use the connection to enter a static secret access key.
Dynamic Session Token	Use this input to authenticate with AWS if you are using a OPTIONAL dynamically-generated session token.
Expiration Seconds	Number of seconds until the presigned URL expires. Default is 3600 (1 hour).	3600
Object Key	An object in S3 is a file that is saved in a 'bucket'. This represents the object's key (file path). Do not include a leading /.	path/to/file.txt

Example Payload for Generate Presigned URL⤓

Loading…

Generate Presigned URL for Multipart Uploads

Generate presigned URLs for uploading the parts of a multipart upload to S3. | key: generatePresignedForMultiparUploads

Input	Notes	Example
Connection	The AWS S3 connection to use for authentication. Access keys provide programmatic access to AWS resources. Learn more.
AWS Region	AWS provides services in multiple regions, like us-west-2 or eu-west-1.	us-east-1
Bucket Name	An Amazon S3 'bucket' is a container where files are stored. Buckets can be created from within the AWS console. Bucket names contain only letters, numbers, and dashes.	my-s3-bucket-abc123
Dynamic Access Key ID	Use this input to authenticate with AWS if you are using a dynamically-generated access key. Otherwise, use the connection to enter a static access key ID.
Dynamic Secret Access Key	Use this input to authenticate with AWS if you are using a dynamically-generated secret access key. Otherwise, use the connection to enter a static secret access key.
Dynamic Session Token	Use this input to authenticate with AWS if you are using a OPTIONAL dynamically-generated session token.
Expiration Seconds	Number of seconds until the presigned URL expires. Default is 3600 (1 hour).	3600
Object Key	An object in S3 is a file that is saved in a 'bucket'. This represents the object's key (file path). Do not include a leading /.	path/to/file.txt
Upload ID	The unique identifier for the multipart upload, returned by 'Create Multipart Upload' action.	xadcOB_7YPBOJuoFiQ9cz4P3Pe6FIZwO4f7wN93uHsNBEw97pl5eNwzExg0LAT2dUN91cOmrEQHDsP3WA60CEg
URLs to Generate	The number of presigned URLs to generate for multipart uploads.	10

Example Payload for Generate Presigned URL for Multipart Uploads⤓

Loading…

Get Bucket Location

Get the location (AWS region) of a bucket by name | key: getBucketLocation

Input	Notes	Example
Connection	The AWS S3 connection to use for authentication. Access keys provide programmatic access to AWS resources. Learn more.
Bucket Name	An Amazon S3 'bucket' is a container where files are stored. Buckets can be created from within the AWS console. Bucket names contain only letters, numbers, and dashes.	my-s3-bucket-abc123
Dynamic Access Key ID	Use this input to authenticate with AWS if you are using a dynamically-generated access key. Otherwise, use the connection to enter a static access key ID.
Dynamic Secret Access Key	Use this input to authenticate with AWS if you are using a dynamically-generated secret access key. Otherwise, use the connection to enter a static secret access key.
Dynamic Session Token	Use this input to authenticate with AWS if you are using a OPTIONAL dynamically-generated session token.

Example Payload for Get Bucket Location⤓

Loading…

Get Bucket Notification Configuration

Returns the notification configuration of a bucket | key: getBucketNotificationConfiguration

Input	Notes	Example
Connection	The AWS S3 connection to use for authentication. Access keys provide programmatic access to AWS resources. Learn more.
AWS Region	AWS provides services in multiple regions, like us-west-2 or eu-west-1.	us-east-1
Bucket Name	An Amazon S3 'bucket' is a container where files are stored. Buckets can be created from within the AWS console. Bucket names contain only letters, numbers, and dashes.	my-s3-bucket-abc123
Dynamic Access Key ID	Use this input to authenticate with AWS if you are using a dynamically-generated access key. Otherwise, use the connection to enter a static access key ID.
Dynamic Secret Access Key	Use this input to authenticate with AWS if you are using a dynamically-generated secret access key. Otherwise, use the connection to enter a static secret access key.
Dynamic Session Token	Use this input to authenticate with AWS if you are using a OPTIONAL dynamically-generated session token.

Example Payload for Get Bucket Notification Configuration⤓

Loading…

Get Current Account

Get the current AWS account | key: getCurrentAccount

Input	Notes	Example
Connection	The AWS S3 connection to use for authentication. Access keys provide programmatic access to AWS resources. Learn more.
Dynamic Access Key ID	Use this input to authenticate with AWS if you are using a dynamically-generated access key. Otherwise, use the connection to enter a static access key ID.
Dynamic Secret Access Key	Use this input to authenticate with AWS if you are using a dynamically-generated secret access key. Otherwise, use the connection to enter a static secret access key.
Dynamic Session Token	Use this input to authenticate with AWS if you are using a OPTIONAL dynamically-generated session token.

Example Payload for Get Current Account⤓

Loading…

Get Object

Get the contents of an object | key: getObject

Input	Notes	Example
Connection	The AWS S3 connection to use for authentication. Access keys provide programmatic access to AWS resources. Learn more.
AWS Region	AWS provides services in multiple regions, like us-west-2 or eu-west-1.	us-east-1
Bucket Name	An Amazon S3 'bucket' is a container where files are stored. Buckets can be created from within the AWS console. Bucket names contain only letters, numbers, and dashes.	my-s3-bucket-abc123
Dynamic Access Key ID	Use this input to authenticate with AWS if you are using a dynamically-generated access key. Otherwise, use the connection to enter a static access key ID.
Dynamic Secret Access Key	Use this input to authenticate with AWS if you are using a dynamically-generated secret access key. Otherwise, use the connection to enter a static secret access key.
Dynamic Session Token	Use this input to authenticate with AWS if you are using a OPTIONAL dynamically-generated session token.
Object Key	An object in S3 is a file that is saved in a 'bucket'. This represents the object's key (file path). Do not include a leading /.	path/to/file.txt
Version ID	The version ID of the object to retrieve. When omitted, the current version is returned.	AMn71WZYnWqbvfy0unBOdtaBC.DRiN_r

Example Payload for Get Object⤓

Loading…

Get Object Attributes

Retrieves all the metadata from an object without returning the object itself | key: getObjectAttributes

Input	Notes	Example
Connection	The AWS S3 connection to use for authentication. Access keys provide programmatic access to AWS resources. Learn more.
AWS Region	AWS provides services in multiple regions, like us-west-2 or eu-west-1.	us-east-1
Bucket Name	An Amazon S3 'bucket' is a container where files are stored. Buckets can be created from within the AWS console. Bucket names contain only letters, numbers, and dashes.	my-s3-bucket-abc123
Dynamic Access Key ID	Use this input to authenticate with AWS if you are using a dynamically-generated access key. Otherwise, use the connection to enter a static access key ID.
Dynamic Secret Access Key	Use this input to authenticate with AWS if you are using a dynamically-generated secret access key. Otherwise, use the connection to enter a static secret access key.
Dynamic Session Token	Use this input to authenticate with AWS if you are using a OPTIONAL dynamically-generated session token.
Object Attributes	The object attributes to return in the response. Unspecified attributes are not returned.
Object Key	An object in S3 is a file that is saved in a 'bucket'. This represents the object's key (file path). Do not include a leading /.	path/to/file.txt
Version ID	The version ID for the object whose metadata to retrieve.	AMn71WZYnWqbvfy0unBOdtaBC.DRiN_r

Example Payload for Get Object Attributes⤓

Loading…

Get Object Lock Configuration

Gets the Object Lock configuration for a bucket | key: getObjectLockConfiguration

Input	Notes	Example
Connection	The AWS S3 connection to use for authentication. Access keys provide programmatic access to AWS resources. Learn more.
AWS Region	AWS provides services in multiple regions, like us-west-2 or eu-west-1.	us-east-1
Bucket Name	An Amazon S3 'bucket' is a container where files are stored. Buckets can be created from within the AWS console. Bucket names contain only letters, numbers, and dashes.	my-s3-bucket-abc123
Dynamic Access Key ID	Use this input to authenticate with AWS if you are using a dynamically-generated access key. Otherwise, use the connection to enter a static access key ID.
Dynamic Secret Access Key	Use this input to authenticate with AWS if you are using a dynamically-generated secret access key. Otherwise, use the connection to enter a static secret access key.
Dynamic Session Token	Use this input to authenticate with AWS if you are using a OPTIONAL dynamically-generated session token.

Example Payload for Get Object Lock Configuration⤓

Loading…

Get Object Retention

Retrieves an object's retention settings | key: getObjectRetention

Input	Notes	Example
Connection	The AWS S3 connection to use for authentication. Access keys provide programmatic access to AWS resources. Learn more.
AWS Region	AWS provides services in multiple regions, like us-west-2 or eu-west-1.	us-east-1
Bucket Name	An Amazon S3 'bucket' is a container where files are stored. Buckets can be created from within the AWS console. Bucket names contain only letters, numbers, and dashes.	my-s3-bucket-abc123
Dynamic Access Key ID	Use this input to authenticate with AWS if you are using a dynamically-generated access key. Otherwise, use the connection to enter a static access key ID.
Dynamic Secret Access Key	Use this input to authenticate with AWS if you are using a dynamically-generated secret access key. Otherwise, use the connection to enter a static secret access key.
Dynamic Session Token	Use this input to authenticate with AWS if you are using a OPTIONAL dynamically-generated session token.
Object Key	An object in S3 is a file that is saved in a 'bucket'. This represents the object's key (file path). Do not include a leading /.	path/to/file.txt
Version ID	The version ID for the object whose retention settings to retrieve.	AMn71WZYnWqbvfy0unBOdtaBC.DRiN_r

Example Payload for Get Object Retention⤓

Loading…

Head Bucket

Determine if a bucket exists and whether the connection has permission to access it. | key: headBucket

Input	Notes	Example
Connection	The AWS S3 connection to use for authentication. Access keys provide programmatic access to AWS resources. Learn more.
AWS Region	AWS provides services in multiple regions, like us-west-2 or eu-west-1.	us-east-1
Bucket Name	An Amazon S3 'bucket' is a container where files are stored. Buckets can be created from within the AWS console. Bucket names contain only letters, numbers, and dashes.	my-s3-bucket-abc123
Dynamic Access Key ID	Use this input to authenticate with AWS if you are using a dynamically-generated access key. Otherwise, use the connection to enter a static access key ID.
Dynamic Secret Access Key	Use this input to authenticate with AWS if you are using a dynamically-generated secret access key. Otherwise, use the connection to enter a static secret access key.
Dynamic Session Token	Use this input to authenticate with AWS if you are using a OPTIONAL dynamically-generated session token.

Example Payload for Head Bucket⤓

Loading…

Head Object

Retrieve metadata from an object without returning the object itself | key: headObject

Input	Notes	Example
Connection	The AWS S3 connection to use for authentication. Access keys provide programmatic access to AWS resources. Learn more.
AWS Region	AWS provides services in multiple regions, like us-west-2 or eu-west-1.	us-east-1
Bucket Name	An Amazon S3 'bucket' is a container where files are stored. Buckets can be created from within the AWS console. Bucket names contain only letters, numbers, and dashes.	my-s3-bucket-abc123
Dynamic Access Key ID	Use this input to authenticate with AWS if you are using a dynamically-generated access key. Otherwise, use the connection to enter a static access key ID.
Dynamic Secret Access Key	Use this input to authenticate with AWS if you are using a dynamically-generated secret access key. Otherwise, use the connection to enter a static secret access key.
Dynamic Session Token	Use this input to authenticate with AWS if you are using a OPTIONAL dynamically-generated session token.
Object Key	An object in S3 is a file that is saved in a 'bucket'. This represents the object's key (file path). Do not include a leading /.	path/to/file.txt
Version ID	The version ID of the object whose metadata to retrieve.	AMn71WZYnWqbvfy0unBOdtaBC.DRiN_r

Example Payload for Head Object⤓

Loading…

List Buckets

List all buckets in an AWS account | key: listBuckets

Input	Notes	Example
Connection	The AWS S3 connection to use for authentication. Access keys provide programmatic access to AWS resources. Learn more.
AWS Region	AWS provides services in multiple regions, like us-west-2 or eu-west-1.	us-east-1
Dynamic Access Key ID	Use this input to authenticate with AWS if you are using a dynamically-generated access key. Otherwise, use the connection to enter a static access key ID.
Dynamic Secret Access Key	Use this input to authenticate with AWS if you are using a dynamically-generated secret access key. Otherwise, use the connection to enter a static secret access key.
Dynamic Session Token	Use this input to authenticate with AWS if you are using a OPTIONAL dynamically-generated session token.

Example Payload for List Buckets⤓

Loading…

List Multipart Uploads

Lists in-progress multipart uploads in a bucket | key: listMultipartUploads

Input	Notes	Example
Connection	The AWS S3 connection to use for authentication. Access keys provide programmatic access to AWS resources. Learn more.
AWS Region	AWS provides services in multiple regions, like us-west-2 or eu-west-1.	us-east-1
Bucket Name	An Amazon S3 'bucket' is a container where files are stored. Buckets can be created from within the AWS console. Bucket names contain only letters, numbers, and dashes.	my-s3-bucket-abc123
Dynamic Access Key ID	Use this input to authenticate with AWS if you are using a dynamically-generated access key. Otherwise, use the connection to enter a static access key ID.
Dynamic Secret Access Key	Use this input to authenticate with AWS if you are using a dynamically-generated secret access key. Otherwise, use the connection to enter a static secret access key.
Dynamic Session Token	Use this input to authenticate with AWS if you are using a OPTIONAL dynamically-generated session token.

Example Payload for List Multipart Uploads⤓

Loading…

List Objects

List Objects in a Bucket | key: listObjects

Input	Notes	Example
Connection	The AWS S3 connection to use for authentication. Access keys provide programmatic access to AWS resources. Learn more.
AWS Region	AWS provides services in multiple regions, like us-west-2 or eu-west-1.	us-east-1
Bucket Name	An Amazon S3 'bucket' is a container where files are stored. Buckets can be created from within the AWS console. Bucket names contain only letters, numbers, and dashes.	my-s3-bucket-abc123
Dynamic Access Key ID	Use this input to authenticate with AWS if you are using a dynamically-generated access key. Otherwise, use the connection to enter a static access key ID.
Dynamic Secret Access Key	Use this input to authenticate with AWS if you are using a dynamically-generated secret access key. Otherwise, use the connection to enter a static secret access key.
Dynamic Session Token	Use this input to authenticate with AWS if you are using a OPTIONAL dynamically-generated session token.
Include Metadata	When true, returns full object metadata and pagination information instead of just object keys.	false
Pagination	Cursor and page-size controls for paging through results.
Prefix	List only objects prefixed with this string. For example, to list only files in a directory called 'unprocessed', enter 'unprocessed/'. If this is left blank, all files in the selected bucket will be listed.	path/to/files/

Example Payload for List Objects⤓

Loading…

List Parts

List parts of a multipart upload | key: listParts

Input	Notes	Example
Connection	The AWS S3 connection to use for authentication. Access keys provide programmatic access to AWS resources. Learn more.
AWS Region	AWS provides services in multiple regions, like us-west-2 or eu-west-1.	us-east-1
Bucket Name	An Amazon S3 'bucket' is a container where files are stored. Buckets can be created from within the AWS console. Bucket names contain only letters, numbers, and dashes.	my-s3-bucket-abc123
Dynamic Access Key ID	Use this input to authenticate with AWS if you are using a dynamically-generated access key. Otherwise, use the connection to enter a static access key ID.
Dynamic Secret Access Key	Use this input to authenticate with AWS if you are using a dynamically-generated secret access key. Otherwise, use the connection to enter a static secret access key.
Dynamic Session Token	Use this input to authenticate with AWS if you are using a OPTIONAL dynamically-generated session token.
Object Key	An object in S3 is a file that is saved in a 'bucket'. This represents the object's key (file path). Do not include a leading /.	path/to/file.txt
Upload ID	The unique identifier for the multipart upload, returned by 'Create Multipart Upload' action.	xadcOB_7YPBOJuoFiQ9cz4P3Pe6FIZwO4f7wN93uHsNBEw97pl5eNwzExg0LAT2dUN91cOmrEQHDsP3WA60CEg

Example Payload for List Parts⤓

Loading…

Put Bucket Notification Configuration

Replace an existing bucket notification configuration with a new one | key: putBucketNotificationConfiguration

Input	Notes	Example
Connection	The AWS S3 connection to use for authentication. Access keys provide programmatic access to AWS resources. Learn more.
AWS Region	AWS provides services in multiple regions, like us-west-2 or eu-west-1.	us-east-1
Bucket Name	An Amazon S3 'bucket' is a container where files are stored. Buckets can be created from within the AWS console. Bucket names contain only letters, numbers, and dashes.	my-s3-bucket-abc123
Dynamic Access Key ID	Use this input to authenticate with AWS if you are using a dynamically-generated access key. Otherwise, use the connection to enter a static access key ID.
Dynamic Secret Access Key	Use this input to authenticate with AWS if you are using a dynamically-generated secret access key. Otherwise, use the connection to enter a static secret access key.
Dynamic Session Token	Use this input to authenticate with AWS if you are using a OPTIONAL dynamically-generated session token.
EventBridge Configuration	EventBridge configuration for bucket event notifications. For more information, see Using EventBridge with S3.	`{ "Id": "event-bridge-1", "EventBridgeArn": "arn:aws:eventbridge:us-west-2:123456789012:myeventbridge", "Events": [ "s3:ObjectCreated:*" ], "Filter": { "Key": { "FilterRules": [ { "Name": "prefix", "Value": "images/" } ] } } }`
Lambda Function Configurations	List of Lambda function configurations for bucket event notifications. For more information, see S3 Event Notifications.	`[ { "Id": "lambda-1", "LambdaFunctionArn": "arn:aws:lambda:us-west-2:123456789012:function:my-function", "Events": [ "s3:ObjectCreated:*" ], "Filter": { "Key": { "FilterRules": [ { "Name": "prefix", "Value": "images/" } ] } } } ]`
Queue Configurations	List of SQS queue configurations for bucket event notifications. For more information, see S3 Event Notifications.	`[ { "Id": "queue-1", "QueueArn": "arn:aws:sqs:us-west-2:123456789012:myqueue", "Events": [ "s3:ObjectCreated:*" ], "Filter": { "Key": { "FilterRules": [ { "Name": "prefix", "Value": "images/" } ] } } } ]`
Topic Configurations	List of SNS topic configurations for bucket event notifications. For more information, see S3 Event Notifications.	`[ { "Id": "topic-1", "TopicArn": "arn:aws:sns:us-west-2:123456789012:mytopic", "Events": [ "s3:ObjectCreated:*" ], "Filter": { "Key": { "FilterRules": [ { "Name": "prefix", "Value": "images/" } ] } } } ]`

Example Payload for Put Bucket Notification Configuration⤓

Loading…

Put Object

Write an object to S3 | key: putObject

Input	Notes	Example
Connection	The AWS S3 connection to use for authentication. Access keys provide programmatic access to AWS resources. Learn more.
ACL Permissions	Canned ACL permissions to apply to the object. For more information, see S3 Canned ACLs.
AWS Region	AWS provides services in multiple regions, like us-west-2 or eu-west-1.	us-east-1
Bucket Name	An Amazon S3 'bucket' is a container where files are stored. Buckets can be created from within the AWS console. Bucket names contain only letters, numbers, and dashes.	my-s3-bucket-abc123
Dynamic Access Key ID	Use this input to authenticate with AWS if you are using a dynamically-generated access key. Otherwise, use the connection to enter a static access key ID.
Dynamic Secret Access Key	Use this input to authenticate with AWS if you are using a dynamically-generated secret access key. Otherwise, use the connection to enter a static secret access key.
Dynamic Session Token	Use this input to authenticate with AWS if you are using a OPTIONAL dynamically-generated session token.
File Contents	The contents to write to the object. Accepts text strings or binary data (images, PDFs, etc.) from previous steps.	My File Contents
Object Key	An object in S3 is a file that is saved in a 'bucket'. This represents the object's key (file path). Do not include a leading /.	path/to/file.txt
Object Tags	Key-value pairs to tag the object for filtering and organization. For more information, see S3 Object Tagging.	Environment, Production

note

File Contents can be a reference to a binary file from a previous step. For example, if an HTTP Get action pulls down a .png image, its step name can be referenced to write the .png to S3. Or, File Contents can be simple text, like 'Hello World'.

Example Payload for Put Object⤓

Loading…

Put Object Lock Configuration

Places an Object Lock configuration on the specified bucket | key: putObjectLockConfiguration

Input	Notes	Example
Connection	The AWS S3 connection to use for authentication. Access keys provide programmatic access to AWS resources. Learn more.
AWS Region	AWS provides services in multiple regions, like us-west-2 or eu-west-1.	us-east-1
Bucket Name	An Amazon S3 'bucket' is a container where files are stored. Buckets can be created from within the AWS console. Bucket names contain only letters, numbers, and dashes.	my-s3-bucket-abc123
Default Retention Days	Number of days for the default retention period. Mutually exclusive with Default Retention Years.	90
Default Retention Mode	Object Lock retention mode for new objects. Must be used with either Default Retention Days or Years. For more information, see S3 Object Lock.
Default Retention Years	Number of years for the default retention period. Mutually exclusive with Default Retention Days.	7
Dynamic Access Key ID	Use this input to authenticate with AWS if you are using a dynamically-generated access key. Otherwise, use the connection to enter a static access key ID.
Dynamic Secret Access Key	Use this input to authenticate with AWS if you are using a dynamically-generated secret access key. Otherwise, use the connection to enter a static secret access key.
Dynamic Session Token	Use this input to authenticate with AWS if you are using a OPTIONAL dynamically-generated session token.

Example Payload for Put Object Lock Configuration⤓

Loading…

Put Object Retention

Places an Object Retention configuration on an object | key: putObjectRetention

Input	Notes	Example
Connection	The AWS S3 connection to use for authentication. Access keys provide programmatic access to AWS resources. Learn more.
AWS Region	AWS provides services in multiple regions, like us-west-2 or eu-west-1.	us-east-1
Bucket Name	An Amazon S3 'bucket' is a container where files are stored. Buckets can be created from within the AWS console. Bucket names contain only letters, numbers, and dashes.	my-s3-bucket-abc123
Dynamic Access Key ID	Use this input to authenticate with AWS if you are using a dynamically-generated access key. Otherwise, use the connection to enter a static access key ID.
Dynamic Secret Access Key	Use this input to authenticate with AWS if you are using a dynamically-generated secret access key. Otherwise, use the connection to enter a static secret access key.
Dynamic Session Token	Use this input to authenticate with AWS if you are using a OPTIONAL dynamically-generated session token.
Object Key	An object in S3 is a file that is saved in a 'bucket'. This represents the object's key (file path). Do not include a leading /.	path/to/file.txt
Retain Until Date	The date and time when Object Retention expires. Required when using Retention Mode. Must be in ISO 8601 format.	2025-12-31T23:59:59.000Z
Retention Mode	Retention mode for the specified object. Required when Retain Until Date is set.
Version ID	The version ID of the object to apply the retention configuration to.	AMn71WZYnWqbvfy0unBOdtaBC.DRiN_r

Example Payload for Put Object Retention⤓

Loading…

Subscribe to SNS Topic

Subscribe to an Amazon SNS Topic for S3 Event Notifications | key: subscribeToTopic

Input	Notes	Example
Connection	The AWS S3 connection to use for authentication. Access keys provide programmatic access to AWS resources. Learn more.
AWS Region	AWS provides services in multiple regions, like us-west-2 or eu-west-1.	us-east-1
Dynamic Access Key ID	Use this input to authenticate with AWS if you are using a dynamically-generated access key. Otherwise, use the connection to enter a static access key ID.
Dynamic Secret Access Key	Use this input to authenticate with AWS if you are using a dynamically-generated secret access key. Otherwise, use the connection to enter a static secret access key.
Dynamic Session Token	Use this input to authenticate with AWS if you are using a OPTIONAL dynamically-generated session token.
Webhook Endpoint	The HTTPS endpoint URL that will receive S3 event notifications.	https://hooks.example.com/trigger/SW5zdGFuY2VGbG93Q29uZmlnOjhiNGY0ZTRkLWIyODMtNDE4Yy04YmZhLTg1NGI11234567890==
SNS Topic ARN	The Amazon Resource Name (ARN) of the SNS topic. For more information, see Getting started with Amazon SNS.	arn:aws:sns:us-east-1:123456789012:S3EventNotifications

Example Payload for Subscribe to SNS Topic⤓

Loading…

Unsubscribe from SNS Topic

Unsubscribe from an Amazon SNS Topic for S3 Event Notifications | key: unsubscribeFromTopic

Input	Notes	Example
Connection	The AWS S3 connection to use for authentication. Access keys provide programmatic access to AWS resources. Learn more.
AWS Region	AWS provides services in multiple regions, like us-west-2 or eu-west-1.	us-east-1
Dynamic Access Key ID	Use this input to authenticate with AWS if you are using a dynamically-generated access key. Otherwise, use the connection to enter a static access key ID.
Dynamic Secret Access Key	Use this input to authenticate with AWS if you are using a dynamically-generated secret access key. Otherwise, use the connection to enter a static secret access key.
Dynamic Session Token	Use this input to authenticate with AWS if you are using a OPTIONAL dynamically-generated session token.
Subscription ARN	The Amazon Resource Name (ARN) of the SNS topic subscription.	arn:aws:sns:us-east-2:123456789012:MyTopic:a1b2c3d4-e5f6-7890-a1b2-c3d4e5f67890

Example Payload for Unsubscribe from SNS Topic⤓

Loading…

Update SNS Topic Policy for S3 Event Notification

Update an Amazon SNS Topic Policy to grant S3 permission to publish | key: updateTopicPolicy

Input	Notes	Example
Connection	The AWS S3 connection to use for authentication. Access keys provide programmatic access to AWS resources. Learn more.
AWS Region	AWS provides services in multiple regions, like us-west-2 or eu-west-1.	us-east-1
Bucket Name	An Amazon S3 'bucket' is a container where files are stored. Buckets can be created from within the AWS console. Bucket names contain only letters, numbers, and dashes.	my-s3-bucket-abc123
Bucket Owner Account ID	The 12-digit AWS Account ID of the bucket owner. Find this in the AWS Console account settings or use the 'Get Current Account' action.	123456789012
Dynamic Access Key ID	Use this input to authenticate with AWS if you are using a dynamically-generated access key. Otherwise, use the connection to enter a static access key ID.
Dynamic Secret Access Key	Use this input to authenticate with AWS if you are using a dynamically-generated secret access key. Otherwise, use the connection to enter a static secret access key.
Dynamic Session Token	Use this input to authenticate with AWS if you are using a OPTIONAL dynamically-generated session token.
SNS Topic ARN	The Amazon Resource Name (ARN) of the SNS topic. For more information, see Getting started with Amazon SNS.	arn:aws:sns:us-east-1:123456789012:S3EventNotifications

Example Payload for Update SNS Topic Policy for S3 Event Notification⤓

Loading…

Upload Part

Upload a chunk of a multipart file upload | key: uploadPart

Input	Notes	Example
Connection	The AWS S3 connection to use for authentication. Access keys provide programmatic access to AWS resources. Learn more.
AWS Region	AWS provides services in multiple regions, like us-west-2 or eu-west-1.	us-east-1
Bucket Name	An Amazon S3 'bucket' is a container where files are stored. Buckets can be created from within the AWS console. Bucket names contain only letters, numbers, and dashes.	my-s3-bucket-abc123
Dynamic Access Key ID	Use this input to authenticate with AWS if you are using a dynamically-generated access key. Otherwise, use the connection to enter a static access key ID.
Dynamic Secret Access Key	Use this input to authenticate with AWS if you are using a dynamically-generated secret access key. Otherwise, use the connection to enter a static secret access key.
Dynamic Session Token	Use this input to authenticate with AWS if you are using a OPTIONAL dynamically-generated session token.
File Chunk	The binary data chunk to upload as part of a multipart upload. Reference output from a previous step.
Object Key	An object in S3 is a file that is saved in a 'bucket'. This represents the object's key (file path). Do not include a leading /.	path/to/file.txt
Part Number	The part number for this chunk in the multipart upload sequence (1-10,000).	1
Upload ID	The unique identifier for the multipart upload, returned by 'Create Multipart Upload' action.	xadcOB_7YPBOJuoFiQ9cz4P3Pe6FIZwO4f7wN93uHsNBEw97pl5eNwzExg0LAT2dUN91cOmrEQHDsP3WA60CEg

Example Payload for Upload Part⤓

Loading…

Write Upload Stream

Write to an upload stream | key: writeUploadStream

Input	Notes	Example
File Contents	The contents to write to the object. Accepts text strings or binary data (images, PDFs, etc.) from previous steps.	My File Contents
Upload Stream ID	The ID of the upload stream to write to. Generate this with the 'Create Stream' action.

Example Payload for Write Upload Stream⤓

Loading…

Changelog

2026-10-05

Added new inputs and polling trigger capabilities, and fixed issues in file polling, bucket listing, and webhook message verification:

Added an optional Version ID input to the Get Object and Head Object actions for retrieving a specific object version
Added an optional Topic ARN input to the Webhook trigger that rejects messages from any other Amazon SNS topic
Added opt-in batching to the New and Updated Files trigger, dispatching each file individually or in configured batches so large backlogs drain in one recurrence; enabling it changes the shape a downstream step receives
Added opt-in batching to the New Buckets trigger, dispatching each bucket individually or in configured batches; enabling it changes the shape a downstream step receives
Added an optional Look-back Date input on the New and Updated Files and New Buckets triggers for performing an initial sync. The initial sync begins on the first recurrence and backfills every file modified, or bucket created, on or after the specified date, seeding each once; later recurrences are unaffected. Leave it empty to start from the first recurrence with no backfill
Updated List Objects to group its Max Keys and Continuation Token inputs into a Pagination structured object
Added inline action calling support across all actions for improved example output during configuration
Added output schemas to 29 actions for improved field mapping during configuration
Updated action labels: Bucket SNS Event Trigger Configuration is now Add Bucket SNS Event Notification, and the Upload Stream - Create Stream, Upload Stream - Write Data, and Upload Stream - Close Stream actions are now Create Upload Stream, Write Upload Stream, and Close Upload Stream
Fixed the New and Updated Files trigger missing files: files beyond the first 1,000 keys in a bucket were never detected, and a file modified in the same second a recurrence started was never returned
Fixed the List Buckets action, the Select Bucket data source, and the New Buckets trigger failing for AWS accounts with a general purpose bucket quota above 10,000, where Amazon S3 rejects unpaginated bucket listings
Fixed the Webhook trigger accepting messages not signed by Amazon SNS, including forged subscription confirmations it would then confirm against any URL

2026-08-05

Various modernizations and documentation updates

2026-05-28

Various modernizations and documentation updates

2026-04-30

Updated spectral version

2025-12-05

Added New and Updated Files polling trigger to detect file changes in S3 buckets on a configured schedule

2025-07-11

Added External ID optional input to Assume Role connection for enhanced security when assuming cross-account IAM roles

Amazon S3 Connector

Description​

API Documentation​

Listening for file changes​

Streaming large files to S3​

Connections​

AWS S3 Access Key and Secret​

Prerequisites​

Setup Steps​

Configure the Connection​

AWS Role ARN​

Prerequisites​

Setup Steps​

Create an IAM Role with Trust Policy​

Configure the Connection​

Verify Connection​

Triggers​

New and Updated Files​

How It Works​

Returned Data​

Returned Data with Batching​

Best Practices​

Limitations​

New Buckets​

How It Works​

Returned Data​

Returned Data with Batching​

Best Practices​

Webhook​

How It Works​

Branch Logic​

Configuration​

Returned Data​

Best Practices​

Data Sources​

Select AWS Region​

Select Bucket​

Actions​

Abort Multipart Upload​

Add Bucket SNS Event Notification​

Close Upload Stream​

Complete Multipart Upload​

Copy Object​

Create Multipart Upload​

Create SNS Topic for S3 Event Notification​

Create Upload Stream​

Delete Bucket​

Delete Object​

Delete Objects​

Generate Presigned URL​

Generate Presigned URL for Multipart Uploads​

Get Bucket Location​

Get Bucket Notification Configuration​

Get Current Account​

Get Object​

Get Object Attributes​

Get Object Lock Configuration​

Get Object Retention​

Head Bucket​

Head Object​

List Buckets​

List Multipart Uploads​

List Objects​

List Parts​

Put Bucket Notification Configuration​

Put Object​

Put Object Lock Configuration​

Put Object Retention​

Subscribe to SNS Topic​

Unsubscribe from SNS Topic​

Update SNS Topic Policy for S3 Event Notification​

Upload Part​

Write Upload Stream​

Changelog​

2026-10-05​

2026-08-05​

2026-05-28​

2026-04-30​

2025-12-05​

2025-07-11​

Description

API Documentation

Listening for file changes

Streaming large files to S3

Connections

AWS S3 Access Key and Secret

Prerequisites

Setup Steps

Configure the Connection

AWS Role ARN

Prerequisites

Setup Steps

Create an IAM Role with Trust Policy

Configure the Connection

Verify Connection

Triggers

New and Updated Files

How It Works

Returned Data

Returned Data with Batching

Best Practices

Limitations

New Buckets

How It Works

Returned Data

Returned Data with Batching

Best Practices

Webhook

How It Works

Branch Logic

Configuration

Returned Data

Best Practices

Data Sources

Select AWS Region

Select Bucket

Actions

Abort Multipart Upload

Add Bucket SNS Event Notification

Close Upload Stream

Complete Multipart Upload

Copy Object

Create Multipart Upload

Create SNS Topic for S3 Event Notification

Create Upload Stream

Delete Bucket

Delete Object

Delete Objects

Generate Presigned URL

Generate Presigned URL for Multipart Uploads

Get Bucket Location

Get Bucket Notification Configuration

Get Current Account

Get Object

Get Object Attributes

Get Object Lock Configuration

Get Object Retention

Head Bucket

Head Object

List Buckets

List Multipart Uploads

List Objects

List Parts

Put Bucket Notification Configuration

Put Object

Put Object Lock Configuration

Put Object Retention

Subscribe to SNS Topic

Unsubscribe from SNS Topic

Update SNS Topic Policy for S3 Event Notification

Upload Part

Write Upload Stream

Changelog

2026-10-05

2026-08-05

2026-05-28

2026-04-30

2025-12-05

2025-07-11