Amazon S3
Read and write objects in S3 buckets from your workflows
Amazon S3 is AWS's object storage service, used for documents, images, data exports, and backups. CipherSense Agents connects via an IAM access key and secret to list and retrieve objects from your buckets, making files available as context for Agent nodes.
Official documentationSetup
Create a least-privilege IAM user
Create a least-privilege IAM user
In AWS IAM: Users > Create user. Attach a custom policy granting only s3:GetObject and s3:ListBucket on the specific buckets your workflow needs. Do not use root credentials.
{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Action": ["s3:GetObject", "s3:ListBucket"],
"Resource": [
"arn:aws:s3:::your-bucket-name",
"arn:aws:s3:::your-bucket-name/*"
]
}
]
}Generate Access Keys
Generate Access Keys
In IAM: select your user > Security credentials > Access keys > Create access key. Copy the Access Key ID and Secret Access Key.
Add the integration in CipherSense Agents
Add the integration in CipherSense Agents
Go to Project > Integrations > Add Integration > Amazon S3. Enter your Access Key ID, Secret Access Key, and AWS region. Click Save & Test.
Connection Fields
Fields required when adding this integration in your Project › Integrations.
| Field | Required | Description |
|---|---|---|
| Access Key ID | Required | Your IAM user's AWS access key ID. |
| Secret Access Key | Required | Your IAM user's AWS secret access key. |
| Region | Required | AWS region where your buckets are located (e.g. us-east-1, eu-west-2). |
| Bucket Name | Required | Name of the S3 bucket to read from. |
Common Use Cases
Ready to connect Amazon S3?
Add this integration from your project dashboard and wire it into a workflow.
On This Page