Use this task to create an Amazon S3 cloud file connector. S3 connectors support two authentication methods: key-based authentication using access keys, or role-based authentication using IAM instance profiles.

Prerequisites

  • You have an AWS account with an S3 bucket containing files you want to mask or discover.

  • For key-based authentication (AWS_SECRET): You have an AWS access key and secret key for an IAM user with S3 bucket access.

  • For role-based authentication (AWS_ROLE): Your compliance node is running on an EC2 instance with an IAM role (instance profile) that has S3 bucket access.

Steps

  1. In the left navigation pane, click Compliance > Connectors.

  2. Click + Connector.

  3. In the Details step:

    1. Enter the connector name.

    2. (Optional) Add tags using Tag Key and Tag Value, then click + Tag.

  4. Click Next.

  5. In the Configuration step:

    1. Select the Job Orchestrator that will run masking and discovery jobs using this connector.

    2. Select the Source Type: File - Delimited, File - Fixed Width, File - JSON, File - XML, or File - Parquet.

    3. Select the Connection Method: AWS S3.

    4. Enter the following cloud storage details:

      1. Bucket Name: The S3 bucket name.

      2. Region: The AWS region where the bucket is located (e.g., us-east-1).

      3. Prefix (Optional): A key prefix to scope file discovery within the bucket (e.g., "masking/input/"). If omitted, the entire bucket is accessible.

      4. Delimiter (Optional): The character used to split the storage path into folder-like segments (default: /).

    5. Select the Authentication Method: AWS Secret for key-based authentication or AWS Role for instance profile-based authentication. The credentials required depend on your selection:

      1. AWS Secret: Enter your AWS access key and secret key.

      2. AWS Role: No additional credentials needed if the compliance node is running on an EC2 instance with an attached IAM role.

  6. Click Next.

  7. In the Summary step, review the connector details.

  8. If you need to make changes, click Back to update the previous steps. Otherwise, click Submit.

Test your connection

(Optional) Before submitting the connector, click Test Connection to verify connectivity to your S3 bucket.

Last updated
Oct 8, 2026