> ## Documentation Index
> Fetch the complete documentation index at: https://docs.cloud.cdata.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Amazon S3

export const title_6 = "Amazon S3";

export const title_5 = "Amazon S3";

export const title_4 = "Amazon S3";

export const title_3 = "Amazon S3";

export const title_2 = "Amazon S3";

export const title_1 = "Amazon S3";

export const title_0 = "Amazon S3";

## Setup Guide

Follow these steps to connect Amazon S3 to your Connect AI account:

<Steps>
  <Step>
    Open the **Sources** page of the Connect AI navigation menu.
  </Step>

  <Step>
    Click **+ Add Connection** in the upper-right corner.
  </Step>

  <Step>
    Type *Amazon S3* into the search field, then click the data source name.
  </Step>

  <Step>
    On the **Basic Settings** tab of the new connection, enter a connection name or keep the default name.
  </Step>

  <Step>
    Select the **AWS Region** that hosts your AWS account.
  </Step>

  <Step>
    Select the **Auth Scheme**, then proceed to the relevant section and follow those instructions.
  </Step>
</Steps>

## Authentication Methods

<Tabs>
  <Tab title="ADFS">
    <Steps>
      <Step>
        Enter the ADFS **User** Id.
      </Step>

      <Step>
        Enter the **Password** for that account.
      </Step>

      <Step>
        Specify the **SSO Login URL** used by the identity provider.
      </Step>

      <Step>
        Enter the **SSO Properties** required to connect to the identity provider. Separate all property-value pairs with a semicolon.
      </Step>

      <Step>
        At the top of the Connect AI **Add {title_0} Connection** page, click **Save & Test**.

        * If the connection test succeeds, a **Connection successfully saved** message appears, indicating that your connection has been created. The **Status** on the **Edit Connection** page also changes to **Authenticated**. View the data model of your successful connection in the right pane of the **Edit Connection** page, in the **Data Model** tab.
        * If the connection test fails, ensure that you entered your login information correctly with no stray spaces or other characters. Connect AI displays error messages under the required fields with missing data. Some data sources require that you sign in directly to the source website. If you did not, an error message appears under the **Sign in** button. Correct the errors and try again.
        * Unsuccessful connections are saved as drafts and have a **Status** of **Not Authenticated**. You can return to the connection and authenticate it later.
      </Step>
    </Steps>
  </Tab>

  <Tab title="AWSRootKeys">
    <Steps>
      <Step>
        Enter the **AWS Access Key** for your AWS account. You can find this on your AWS security credentials page.
      </Step>

      <Step>
        Enter the **AWS Secret Key** for your AWS account. You can find this on your AWS security credentials page.
      </Step>

      <Step>
        At the top of the Connect AI **Add {title_1} Connection** page, click **Save & Test**.

        * If the connection test succeeds, a **Connection successfully saved** message appears, indicating that your connection has been created. The **Status** on the **Edit Connection** page also changes to **Authenticated**. View the data model of your successful connection in the right pane of the **Edit Connection** page, in the **Data Model** tab.
        * If the connection test fails, ensure that you entered your login information correctly with no stray spaces or other characters. Connect AI displays error messages under the required fields with missing data. Some data sources require that you sign in directly to the source website. If you did not, an error message appears under the **Sign in** button. Correct the errors and try again.
        * Unsuccessful connections are saved as drafts and have a **Status** of **Not Authenticated**. You can return to the connection and authenticate it later.
      </Step>
    </Steps>
  </Tab>

  <Tab title="AWSIAMRoles">
    <Steps>
      <Step>
        Enter the **AWS Access Key** for your AWS account. You can find this on your AWS security credentials page.
      </Step>

      <Step>
        Enter the **AWS Secret Key** for your AWS account. You can find this on your AWS security credentials page.
      </Step>

      <Step>
        Enter the **AWS Role ARN** for the role to assume during authentication. To chain multiple roles, separate the ARNs with semicolons.
      </Step>

      <Step>
        (Optional) Enter the **AWS External Id** if you are assuming a role in another account.
      </Step>

      <Step>
        At the top of the Connect AI **Add {title_2} Connection** page, click **Save & Test**.

        * If the connection test succeeds, a **Connection successfully saved** message appears, indicating that your connection has been created. The **Status** on the **Edit Connection** page also changes to **Authenticated**. View the data model of your successful connection in the right pane of the **Edit Connection** page, in the **Data Model** tab.
        * If the connection test fails, ensure that you entered your login information correctly with no stray spaces or other characters. Connect AI displays error messages under the required fields with missing data. Some data sources require that you sign in directly to the source website. If you did not, an error message appears under the **Sign in** button. Correct the errors and try again.
        * Unsuccessful connections are saved as drafts and have a **Status** of **Not Authenticated**. You can return to the connection and authenticate it later.
      </Step>
    </Steps>
  </Tab>

  <Tab title="AWSIAMRolesAnywhere">
    <Steps>
      <Step>
        Enter the **AWS Role ARN** for the role to assume during authentication.
      </Step>

      <Step>
        Enter the **AWS Certificate**: either the absolute path to the certificate file or the certificate content in PEM format encoded in base64.
      </Step>

      <Step>
        Enter the **AWS Private Key**: either the absolute path to the private key file or the private key content in PEM format encoded in base64.
      </Step>

      <Step>
        Enter the **AWS Profile ARN** for the profile to pull policies from.
      </Step>

      <Step>
        Enter the **AWS Trust Anchor ARN** for the trust anchor to use for authentication.
      </Step>

      <Step>
        (Optional) Enter the **AWS Certificate Password** if your certificate is protected.
      </Step>

      <Step>
        (Optional) Enter the **AWS Private Key Password** if your private key is encrypted.
      </Step>

      <Step>
        At the top of the Connect AI **Add {title_3} Connection** page, click **Save & Test**.

        * If the connection test succeeds, a **Connection successfully saved** message appears, indicating that your connection has been created. The **Status** on the **Edit Connection** page also changes to **Authenticated**. View the data model of your successful connection in the right pane of the **Edit Connection** page, in the **Data Model** tab.
        * If the connection test fails, ensure that you entered your login information correctly with no stray spaces or other characters. Connect AI displays error messages under the required fields with missing data. Some data sources require that you sign in directly to the source website. If you did not, an error message appears under the **Sign in** button. Correct the errors and try again.
        * Unsuccessful connections are saved as drafts and have a **Status** of **Not Authenticated**. You can return to the connection and authenticate it later.
      </Step>
    </Steps>
  </Tab>

  <Tab title="Okta">
    <Steps>
      <Step>
        Enter the Okta **User** Id.
      </Step>

      <Step>
        Enter the **Password** for that account.
      </Step>

      <Step>
        Enter the **SSO Login URL** provided by Okta.
      </Step>

      <Step>
        Enter the **SSO Properties** required to connect to Okta. Separate all property-value pairs with a semicolon.
      </Step>

      <Step>
        At the top of the Connect AI **Add {title_4} Connection** page, click **Save & Test**.

        * If the connection test succeeds, a **Connection successfully saved** message appears, indicating that your connection has been created. The **Status** on the **Edit Connection** page also changes to **Authenticated**. View the data model of your successful connection in the right pane of the **Edit Connection** page, in the **Data Model** tab.
        * If the connection test fails, ensure that you entered your login information correctly with no stray spaces or other characters. Connect AI displays error messages under the required fields with missing data. Some data sources require that you sign in directly to the source website. If you did not, an error message appears under the **Sign in** button. Correct the errors and try again.
        * Unsuccessful connections are saved as drafts and have a **Status** of **Not Authenticated**. You can return to the connection and authenticate it later.
      </Step>
    </Steps>
  </Tab>

  <Tab title="Keycloak">
    <Steps>
      <Step>
        Enter the **Keycloak Realm URL**: the full URL to your Keycloak server including the specific realm used for authentication.
      </Step>

      <Step>
        Enter the **OAuth Client Id** assigned to your OAuth application in Keycloak.
      </Step>

      <Step>
        Enter the **OAuth Client Secret** assigned to your OAuth application in Keycloak.
      </Step>

      <Step>
        At the top of the Connect AI **Add {title_5} Connection** page, click **Save & Test**.

        * If the connection test succeeds, a **Connection successfully saved** message appears, indicating that your connection has been created. The **Status** on the **Edit Connection** page also changes to **Authenticated**. View the data model of your successful connection in the right pane of the **Edit Connection** page, in the **Data Model** tab.
        * If the connection test fails, ensure that you entered your login information correctly with no stray spaces or other characters. Connect AI displays error messages under the required fields with missing data. Some data sources require that you sign in directly to the source website. If you did not, an error message appears under the **Sign in** button. Correct the errors and try again.
        * Unsuccessful connections are saved as drafts and have a **Status** of **Not Authenticated**. You can return to the connection and authenticate it later.
      </Step>
    </Steps>
  </Tab>

  <Tab title="PingFederate">
    <Steps>
      <Step>
        Enter the PingFederate **User** Id.
      </Step>

      <Step>
        Enter the **Password** for that account.
      </Step>

      <Step>
        Specify the **SSO Login URL** used by the identity provider.
      </Step>

      <Step>
        Enter the **SSO Properties** required to connect to the identity provider. Separate all property-value pairs with a semicolon.
      </Step>

      <Step>
        Enter the **SSO Exchange URL** used to consume the SAML response and exchange it for AWS credentials.
      </Step>

      <Step>
        At the top of the Connect AI **Add {title_6} Connection** page, click **Save & Test**.

        * If the connection test succeeds, a **Connection successfully saved** message appears, indicating that your connection has been created. The **Status** on the **Edit Connection** page also changes to **Authenticated**. View the data model of your successful connection in the right pane of the **Edit Connection** page, in the **Data Model** tab.
        * If the connection test fails, ensure that you entered your login information correctly with no stray spaces or other characters. Connect AI displays error messages under the required fields with missing data. Some data sources require that you sign in directly to the source website. If you did not, an error message appears under the **Sign in** button. Correct the errors and try again.
        * Unsuccessful connections are saved as drafts and have a **Status** of **Not Authenticated**. You can return to the connection and authenticate it later.
      </Step>
    </Steps>
  </Tab>
</Tabs>