Amazon S3
List, download, and upload bounded objects in named S3 buckets
Amazon S3 connects a project to buckets through AWS service credentials. A project owner enters the access key ID, secret access key, and AWS region in the secure connector form. Administrators control visibility; no OAuth application is required.
Available operations
| Operation | What it does | Limit per minute |
|---|---|---|
list_objects | Lists up to 1,000 objects with an optional prefix | 30 |
get_object | Downloads one object up to 5 MB as base64 | 20 |
put_object | Uploads one base64 object up to 5 MB | 10 |
Create an IAM principal with access only to the buckets and actions the project needs. A read-only project normally needs s3:ListBucket and s3:GetObject. Add s3:PutObject only for uploads. Do not use an AWS root access key.
Connect and verify Amazon S3
- Ask the AI to use Amazon S3 and enter the credentials and region in the secure form.
- List a test bucket with a narrow prefix.
- Download a small known object and confirm its content type and decoded content.
- If uploads are required, upload
swarmz-connector-test.txtwith a unique marker. - Confirm the object in the S3 console, then delete it there.
Swarmz signs each request with AWS Signature Version 4. A region mismatch causes signature or redirect failures; edit the connection and enter the bucket's region. An AccessDenied response means the IAM policy, bucket policy, or organization policy does not permit that action.