AWS S3 Connector

  • Latest Dynatrace
  • Reference
  • 11-min read

Review the required AWS permissions and condition keys of the AWS S3 Connector actions to ensure that you grant Dynatrace only a minimum set of permissions. For more information, see AWS documentation.

Copy object

Creates a copy of an object that is already stored in Amazon S3.

For more information, see the official documentation of Copy object.

Required AWS permissions:

  • s3:GetObject
  • s3:PutObject

Inputs

Field
Type
Description
Required
Region
string
The region to use.
required
Bucket
string
The name of the destination bucket.
required
CopySource
string
Specifies the source object for the copy operation.
required
Key
string
The key of the destination object.
required
ExpectedBucketOwner
string
The account ID of the expected destination bucket owner.
optional
ExpectedSourceBucketOwner
string
The account ID of the expected source bucket owner.
optional

Output

Returns fields as described in CopyObjectCommandOutput.

Create bucket

This action creates an Amazon S3 bucket.

For more information, see the official documentation of Create bucket.

Required AWS permission: s3:CreateBucket.

Inputs

Field
Type
Description
Required
Region
string
The region to use.
required
Bucket
string
The name of the bucket to create.
required
ACL
BucketCannedACL
The canned ACL to apply to the bucket.
optional

Output

Returns fields as described in CreateBucketCommandOutput.

Delete bucket

Deletes the S3 bucket.

For more information, see the official documentation of Delete bucket.

Required AWS permission: s3:DeleteBucket.

Inputs

Field
Type
Description
Required
Region
string
The region to use.
required
Bucket
string
Specifies the bucket being deleted.
required
ExpectedBucketOwner
string
The account ID of the expected bucket owner.
optional

Output

Returns fields as described in DeleteBucketCommandOutput.

Delete object

Removes an object from a bucket.

For more information, see the official documentation of Delete object.

Required AWS permission: s3:DeleteObject.

Inputs

Field
Type
Description
Required
Region
string
The region to use.
required
Bucket
string
The bucket name of the bucket containing the object.
required
Key
string
Key name of the object to delete.
required
ExpectedBucketOwner
string
The account ID of the expected bucket owner.
optional
VersionId
string
Version ID used to reference a specific version of the object.
optional

Output

Returns fields as described in DeleteObjectCommandOutput.

Get bucket encryption

Returns the default encryption configuration for an Amazon S3 bucket.

For more information, see the official documentation of Get bucket encryption.

Required AWS permission: s3:GetEncryptionConfiguration.

Inputs

Field
Type
Description
Required
Region
string
The region to use.
required
Bucket
string
The name of the bucket from which the server-side encryption configuration is retrieved.
required

Output

Returns fields as described in GetBucketEncryptionCommandOutput.

Get bucket logging

This operation is not supported for directory buckets.

For more information, see the official documentation of Get bucket logging.

Required AWS permission: s3:GetBucketLogging.

Inputs

Field
Type
Description
Required
Region
string
The region to use.
required
Bucket
string
The bucket name for which to get the logging information.
required

Output

Returns fields as described in GetBucketLoggingCommandOutput.

Get object attributes

Retrieves all the metadata from an object without returning the object itself.

For more information, see the official documentation of Get object attributes.

Required AWS permission: s3:GetObjectAttributes.

Inputs

Field
Type
Description
Required
Region
string
The region to use.
required
Bucket
string
The name of the bucket that contains the object.
required
Key
string
The object key.
required
ObjectAttributes
ObjectAttributes[]
Specifies the fields at the root level that you want returned in the response.
required
ExpectedBucketOwner
string
The account ID of the expected bucket owner.
optional
MaxParts
number
Sets the maximum number of parts to return.
optional
PartNumberMarker
string
Specifies the part after which the listing should begin.
optional
VersionId
string
The version ID used to reference a specific version of the object.
optional

Output

Returns fields as described in GetObjectAttributesCommandOutput.

Get object

Retrieves an object from Amazon S3.

For more information, see the official documentation of Get object.

Required AWS permission: s3:GetObject.

Inputs

Field
Type
Description
Required
Region
string
The region to use.
required
Bucket
string
The bucket name containing the object.
required
Key
string
Key of the object to get.
required
ExpectedBucketOwner
string
The account ID of the expected bucket owner.
optional
VersionId
string
Version ID used to reference a specific version of the object.
optional

Output

Returns fields as described in GetObjectCommandOutput.

List buckets

This operation is not supported for directory buckets.

For more information, see the official documentation of List buckets.

Required AWS permission: s3:ListAllMyBuckets.

Inputs

Field
Type
Description
Required
Region
string
The region to use.
required
ContinuationToken
string
ContinuationToken indicates to Amazon S3 that the list is being continued on this bucket with a token.
optional
MaxBuckets
number
Maximum number of buckets to be returned in response.
optional

Output

Returns fields as described in ListBucketsCommandOutput.

List objects v2

Returns some or all (up to 1,000) of the objects in a bucket with each request.

For more information, see the official documentation of List objects v2.

Required AWS permission: s3:ListBucket.

Inputs

Field
Type
Description
Required
Region
string
The region to use.
required
Bucket
string
When you use this operation with a directory bucket, you need to use virtual-hosted-style requests in the format bucket-name.s3express-zone-id.region-code.amazonaws.com.
required
ExpectedBucketOwner
string
The account ID of the expected bucket owner.
optional
MaxKeys
number
Sets the maximum number of keys returned in the response.
optional
Prefix
string
Limits the response to keys that begin with the specified prefix.
optional
StartAfter
string
StartAfter is where you want Amazon S3 to start listing from.
optional

Output

Returns fields as described in ListObjectsV2CommandOutput.

Put bucket ACL

This operation is not supported for directory buckets.

For more information, see the official documentation of Put bucket ACL.

Required AWS permission: s3:PutBucketAcl.

Inputs

Field
Type
Description
Required
Region
string
The region to use.
required
Bucket
string
The bucket to apply the ACL.
required
ACL
BucketCannedACL
The canned ACL to apply to the bucket.
optional
AccessControlPolicy
AccessControlPolicy
Contains the elements that set the ACL permissions for an object per grantee.
optional
ChecksumAlgorithm
ChecksumAlgorithm
Indicates the algorithm used to create the checksum for the request when you use the SDK.
optional
ExpectedBucketOwner
string
The account ID of the expected bucket owner.
optional
GrantFullControl
string
Allows grantee to read, write, read ACP, and write ACP permissions on the bucket.
optional
GrantRead
string
Allows grantee to list the objects in the bucket.
optional
GrantReadACP
string
Allows grantee to read the bucket ACL.
optional
GrantWrite
string
Allows grantee to create new objects in the bucket.
optional
GrantWriteACP
string
Allows grantee to write the ACL for the applicable bucket.
optional

Output

Returns fields as described in PutBucketAclCommandOutput.

Put bucket encryption

This operation configures default encryption and Amazon S3 Bucket Keys for an existing bucket.

For more information, see the official documentation of Put bucket encryption.

Required AWS permission: s3:PutEncryptionConfiguration.

Inputs

Field
Type
Description
Required
Region
string
The region to use.
required
Bucket
string
Specifies default encryption for a bucket using server-side encryption with different key options.
required
ServerSideEncryptionConfiguration
ServerSideEncryptionConfiguration
Specifies the default server-side-encryption configuration.
required
ChecksumAlgorithm
ChecksumAlgorithm
Indicates the algorithm used to create the checksum for the request when you use the SDK.
optional
ExpectedBucketOwner
string
The account ID of the expected bucket owner.
optional

Output

Returns fields as described in PutBucketEncryptionCommandOutput.

Put bucket logging

This operation is not supported for directory buckets.

For more information, see the official documentation of Put bucket logging.

Required AWS permission: s3:PutBucketLogging.

Inputs

Field
Type
Description
Required
Region
string
The region to use.
required
Bucket
string
The bucket name for setting the logging parameters.
required
BucketLoggingStatus
BucketLoggingStatus
Container for logging status information.
required
ChecksumAlgorithm
ChecksumAlgorithm
Indicates the algorithm used to create the checksum for the request when you use the SDK.
optional
ExpectedBucketOwner
string
The account ID of the expected bucket owner.
optional

Output

Returns fields as described in PutBucketLoggingCommandOutput.

Put object

Adds an object to a bucket.

For more information, see the official documentation of Put object.

Required AWS permission: s3:PutObject.

Inputs

Field
Type
Description
Required
Region
string
The region to use.
required
Bucket
string
The bucket name to which the PUT action was initiated.
required
Key
string
Object key for which the PUT action was initiated.
required
Body
string
The Body parameter of the request.
optional
ACL
ObjectCannedACL
The canned ACL to be applied to the object.
optional
ContentType
string
A standard MIME type describing the format of the contents.
optional
ServerSideEncryption
ServerSideEncryption
The server-side encryption algorithm that was used when you store this object in Amazon S3.
optional
StorageClass
StorageClass
The storage class of the object.
optional
ExpectedBucketOwner
string
The account ID of the expected bucket owner.
optional

Output

Returns fields as described in PutObjectCommandOutput.

Put public access block

This operation is not supported for directory buckets.

For more information, see the official documentation of Put public access block.

Required AWS permission: s3:PutBucketPublicAccessBlock.

Inputs

Field
Type
Description
Required
Region
string
The region to use.
required
Bucket
string
The name of the Amazon S3 bucket whose PublicAccessBlock configuration you want to set.
required
PublicAccessBlockConfiguration
PublicAccessBlockConfiguration
The PublicAccessBlock configuration you want to apply to this Amazon S3 bucket.
required
ChecksumAlgorithm
ChecksumAlgorithm
Indicates the algorithm used to create the checksum for the object when you use the SDK.
optional
ExpectedBucketOwner
string
The account ID of the expected bucket owner.
optional

Output

Returns fields as described in PutPublicAccessBlockCommandOutput.

Related tags
Software Delivery