Property | Description |
|---|---|
Connection Name | Name of the connection. Each connection name must be unique within the organization. Connection names can contain alphanumeric characters, spaces, and the following special characters: _ . + -, Maximum length is 255 characters. |
Description | Description of the connection. Maximum length is 4000 characters. |
Type | Amazon S3 V2 |
Use Secret Vault | Stores sensitive credentials for this connection in the secrets manager that is configured for your organization. This property appears only if secrets manager is set up for your organization. When you enable the secret vault in the connection, you can select which credentials that the Secure Agent retrieves from the secrets manager. If you don't enable this option, the credentials are stored in the repository or on a local Secure Agent, depending on how your organization is configured. For information about how to configure and use a secrets manager, see Secrets manager configuration. |
Runtime Environment | The name of the runtime environment where you want to run tasks. Select a Secure Agent, Hosted Agent, or serverless runtime environment. |
Property | Description |
|---|---|
Access Key | Access key to access the Amazon S3 bucket. |
Secret Key | Secret key to access the Amazon S3 bucket. The secret key is associated with the access key and uniquely identifies the account. |
Folder Path | Amazon S3 bucket name or the folder path within the Amazon S3 bucket where the Amazon S3 objects are stored. For example, <bucket name>/<my folder name> |
Region Name | The AWS region of the bucket that you want to access. Select one of the following regions:
Default is US East(N. Virginia). |
Property | Description |
|---|---|
Folder Path | Amazon S3 bucket name or the folder path within the Amazon S3 bucket where the Amazon S3 objects are stored. For example, <bucket name>/<my folder name> |
Region Name | The AWS region of the bucket that you want to access. Select one of the following regions:
Default is US East(N. Virginia). |
Property | Description |
|---|---|
Folder Path | Amazon S3 bucket name or the folder path within the Amazon S3 bucket where the Amazon S3 objects are stored. For example, <bucket name>/<my folder name> |
Region Name | The AWS region of the bucket that you want to access. Select one of the following regions:
Default is US East(N. Virginia). |
IAM Role ARN | The Amazon Resource Name (ARN) of the AWS Identity and Access Management (IAM) role assumed by the user to use the dynamically generated temporary security credentials. Enter the ARN value if you want to use the temporary security credentials to access AWS resources. Note: Even if you remove the IAM role that grants the agent access to the Amazon S3 bucket, the test connection is successful. For more information about how to get the ARN of the IAM role, see the AWS documentation. |
External ID | The external ID of your AWS account. External ID provides a more secure access to the Amazon S3 bucket when the Amazon S3 bucket is in a different AWS account. |
Use EC2 Role to Assume Role | Enables the EC2 role to assume another IAM role specified in the IAM Role ARN option. By default, this property is not selected. Note: The EC2 role must have a policy attached with permissions to assume an IAM role from the same or different account. |
Property | Description |
|---|---|
Access Key | Access key to access the Amazon S3 bucket. |
Secret Key | Secret key to access the Amazon S3 bucket. The secret key is associated with the access key and uniquely identifies the account. |
Folder Path | Amazon S3 bucket name or the folder path within the Amazon S3 bucket where the Amazon S3 objects are stored. For example, <bucket name>/<my folder name> |
Region Name | The AWS region of the bucket that you want to access. Select one of the following regions:
Default is US East(N. Virginia). |
IAM Role ARN | The Amazon Resource Name (ARN) of the AWS Identity and Access Management (IAM) role assumed by the user to use the dynamically generated temporary security credentials. Enter the value of this property if you want to use the temporary security credentials to access the AWS resources. Note: Even if you remove the IAM role that enables the agent to access the Amazon S3 bucket and create a connection, the test connection is successful. For more information about how to get the ARN of the IAM role, see the AWS documentation. |
External ID | The external ID of your AWS account. External ID provides a more secure access to the Amazon S3 bucket when the Amazon S3 bucket is in a different AWS account. |
Property | Description |
|---|---|
Folder Path | Amazon S3 bucket name or the folder path within the Amazon S3 bucket where the Amazon S3 objects are stored. For example, <bucket name>/<my folder name> |
Region Name | The AWS region of the bucket that you want to access. Select one of the following regions:
Default is US East(N. Virginia). |
Other Authentication Type1 | Determines whether you want to use the credential profile file authentication to connect to Amazon S3. Select one the following authentication types:
Enter the credential profile file path and profile name to connect to Amazon S3. You can use permanent IAM credentials or temporary session tokens when you configure the credential profile file authentication. Default is NONE. |
Credential Profile File Path1 | The credential profile file path. If you don't enter the credential profile path, the Secure Agent uses the credential profile file available in the following default location in your home directory: ~/.aws/credentials |
Profile Name1 | Name of the profile in the credential profile file used to get credentials to access Amazon S3 resources. If you don't enter the profile name, the credentials from the default profile in the credential profile file are used. |
1 Applies only to mappings. | |
Property | Description |
|---|---|
Folder Path | Amazon S3 bucket name or the folder path within the Amazon S3 bucket where the Amazon S3 objects are stored. For example, <bucket name>/<my folder name> |
Region Name | The AWS region of the bucket that you want to access. Select one of the following regions:
Default is US East(N. Virginia). |
Federated SSO IdP | SAML 2.0-enabled identity provider for the federated user single sign-on to use with the AWS account. You can only use ADFS 3.0 (IDP) for SSO. Select None if you don't want to use federated user single sign-on. |
Federated User Name | User name of the federated user to access the AWS account through the identity provider. |
Federated User Password | Password for the federated user to access the AWS account through the identity provider. |
IdP SSO URL | Single sign-on URL of the identity provider for AWS. |
SAML Identity Provider ARN | ARN of the SAML identity provider that the AWS administrator created to register the identity provider as a trusted provider. |
Role ARN | ARN of the IAM role assumed by the federated user. |
Property | Description |
|---|---|
S3 Account Type | The type of the Amazon S3 account. Select from the following options:
Default is Amazon S3 storage. |
REST Endpoint | The S3 storage endpoint required for S3 compatible storage. Enter the S3 storage endpoint in HTTP or HTTPs format. For example, http://s3.isv.scality.com. |
S3 VPC Endpoint Type1 | The type of Amazon Virtual Private Cloud endpoint for Amazon S3. You can use a VPC endpoint to enable private communication with Amazon S3. Select one of the following options:
Default is None. |
Endpoint DNS Name for Amazon S31 | The DNS name for the Amazon S3 interface endpoint. Enter the DNS name in the following format: bucket.<DNS name of the interface endpoint> |
STS VPC Endpoint Type1 | The type of Amazon Virtual Private Cloud endpoint for AWS Security Token Service. This option applies when you select the S3 VPC interface endpoint and when use AssumeRole via IAM user or EC2 role authentication or Federated SSO IdP authentication. |
Endpoint DNS Name for AWS STS1 | The DNS name for the AWS STS interface endpoint. |
KMS VPC Endpoint Type1 | The type of Amazon Virtual Private Cloud endpoint for AWS Key Management Service. This option applies when you select the S3 VPC interface endpoint and required when you specify the customer master key ID. |
Endpoint DNS Name for AWS KMS1 | The DNS name for the AWS KMS interface endpoint. |
Master Symmetric Key | A 256-bit AES encryption key in the Base64 format when you use client-side encryption. You can generate a key using a third-party tool. |
Customer Master Key ID | The customer master key ID or alias name generated by AWS Key Management Service (AWS KMS) or the Amazon Resource Name (ARN) of your custom key for cross-account access. Note: Cross-account access is not available for mappings in advanced mode. You must generate the customer master key for the same region where the Amazon S3 bucket resides. You can specify the following master keys:
|
1 Applies only to mappings. | |