Use this task to create an S3-compatible cloud file connector. S3-compatible connectors are used to access S3-compatible storage services such as MinIO, Ceph, or other on-premises object stores that expose the S3 API. Authentication uses access keys and secret keys tied to the service.

Prerequisites

  • You have access to an S3-compatible storage service with a bucket containing files you want to mask or discover.

  • You have the service's endpoint URL (e.g., https://minio.internal:9000).

  • You have access credentials (access key and secret key) for the service.

Steps

  1. In the left navigation pane, click Compliance > Connectors.

  2. Click + Connector.

  3. In the Details step:

    1. Enter the connector name.

    2. (Optional) Add tags using Tag Key and Tag Value, then click + Tag.

  4. Click Next.

  5. In the Configuration step:

    1. Select the Job Orchestrator that will run masking and discovery jobs using this connector.

    2. Select the Source Type: File - Delimited, File - Fixed Width, File - JSON, File - XML, or File - Parquet. File type cannot be changed after creation.

    3. Select the Connection Method: Other S3 Compatible Storage.

    4. Enter the following cloud storage details:

      1. Bucket Name: The bucket name in the S3-compatible service.

      2. Region: The region associated with the bucket. For on-premises services, this may be a placeholder value (e.g., "us-east-1").

      3. Service Endpoint: The URL of the S3-compatible service (e.g., https://minio.internal:9000).

      4. Prefix (Optional): A key prefix to scope file discovery within the bucket (e.g., "masking/input/"). If omitted, the entire bucket is accessible.

      5. Delimiter (Optional): The character used to split the storage path into folder-like segments (default: /).

      6. Access Key: Your access key for the service.

      7. Secret Key: Your secret key for the service.

  6. Click Next.

  7. In the Summary step, review the connector details.

  8. If you need to make changes, click Back to update the previous steps. Otherwise, click Submit.

Test your connection

(Optional) Before submitting the connector, click Test Connection to verify connectivity to your S3-compatible service.

Last updated
Oct 8, 2026