Amazon S3
Connection Type | Alteryx Tools |
Driver Details | An AWS account must be created. |
Type of Support | Read & Write |
Validated On | -- |
Alteryx Tools Used to Connect
Standard Workflow Processing
Data Connection Manager
The Amazon S3 tools support Data Connection Manager for an easier and a safer storage of your credentials. Create a connection to Amazon S3 and easily reuse the stored credentials in workflows that include the Amazon S3 tools. Alteryx Server requires stored credentials to successfully run the published workflows.
Enable AMP Engine
Make sure you have the AMP engine enabled for the workflows which contain the Amazon S3 tools.
Sign In to Amazon S3
Tip
To learn more about the AWS Identity and Access Management, go to What is IAM?.
The Amazon S3 tools support these authentication methods:
AWS IAM Access Keys: Access keys allow you to access the data with full privileges. For more information, go toAWS IAM Access Keys: Access keys allow you to access the data with full privileges. For more information, go to Manage access keys for IAM users.
Assume Role: Roles allow you to limit the privileges when accessing data. For more information, go to Assume a role.
Assume Role with Web Identity: Only available with DCM. This method uses temporary security credentials. For more information, go to AssumeRoleWithWebIdentity.
OAuth Trusted Identity Propagation: Only available with DCM.
OAuth Trusted Identity Propagation - Service Accounts: Only available with DCM.
OAuth with Identity Pool for S3: Only available with DCM. For more information, go to Access S3 data with temporary credentials using AWS Cognito user and identity pools (Alteryx Community).
Configure the Authentication
AWS Access Key: Specify the Amazon Web Services Access Key to use to download data.
AWS Secret Key: Specify the Amazon Web Services Secret Key to use to access the data for download.
In the drop-down, select an encryption option for the AWS Secret Key:
Hide (Default): Hide the password using minimal encryption.
Encrypt for Machine: Any user on the computer will be able to fully use the connection.
Encrypt for User: The logged in user can use the connection on any computer.
AWS Account No.: The Assume Role option only. Enter the AWS account number.
Role: The Assume Role option only. Enter the AWS role.
Save Current AWS Credentials As Default: Saves the AWS credentials to the machine’s registry.
Delete Saved Default AWS Credentials: Deletes any previously saved AWS credentials from the machine’s registry.
Endpoint: Select Default to allow Amazon to determine the endpoint automatically based on the bucket you select. To specify an endpoint for private S3 deployments, or if you know a specific bucket region, you can alternately select an endpoint (S3 region), enter a custom endpoint, or select from one of ten previously-entered custom endpoints.
Bucket Region Agreement
If the Bucket you select is not in the region of the endpoint you specify, this error occurs: "The bucket you are attempting to access must be addressed using the specified endpoint. Please send all future requests to this endpoint." Select Default to clear the error.
Use Signature V4 for Authentication: Select this option to use Signature Version 4 instead of the default Signature Version 2. This will increase security, but connection speeds may be slower. This option is automatically enabled for regions requiring Signature Version 4.
Regions requiring Signature Version 4
Regions created after January 30, 2014 support only Signature Version 4. The following regions require Signature Version 4 authentication:
US East (Ohio) Region
Canada (Central) Region
Asia Pacific (Mumbai) Region
Asia Pacific (Seoul) Region
EU (Frankfurt) Region
EU (London) Region
China (Beijing) Region
Additional Details
Users can upload files in avro, csv, yxdb formats.
Amazon S3 credentials can also be used with Amazon Redshift bulk loader in the Output Data tool in order to write data faster.