AWS Integration

The AWS Integration allows your app to connect to Amazon Web Services (AWS) — the world's most comprehensive cloud platform. Once connected, your app can access 200+ AWS services including storage, databases, compute, AI/ML, and more using the boto3 SDK.

With AWS integration, your app can:

• S3 (Object Storage): Upload, download, and manage files in S3 buckets. Generate presigned URLs for secure file access. Works with S3-compatible services like MinIO, Cloudflare R2, and DigitalOcean Spaces.
• DynamoDB (NoSQL Database): Store and query data in a fully managed, serverless NoSQL database with single-digit millisecond performance.
• Lambda (Serverless Functions): Invoke serverless functions, run code without managing servers, and build event-driven applications.
• SES (Email Service): Send transactional emails, marketing emails, and notifications with high deliverability.
• SNS (Notifications): Send push notifications, SMS, and email messages to users across multiple channels.
• SQS (Message Queues): Build distributed, decoupled systems with reliable message queuing.
• Rekognition (Computer Vision): Analyze images and videos for object detection, facial analysis, text extraction, and content moderation.
• Comprehend (NLP): Extract insights from text using natural language processing for sentiment analysis, entity recognition, and topic modeling.
• Bedrock (AI Models): Access foundation models from AI21 Labs, Anthropic, Cohere, Meta, Stability AI, and Amazon for generative AI applications.
• And 200+ more services: EC2, RDS, CloudWatch, Polly, Textract, Translate, and many others.

1. Log in to the AWS Console.
2. Create IAM credentials:
• Navigate to IAM (Identity and Access Management).
• Click Users → Add user or select an existing user.
• Attach policies based on the AWS services you plan to use:
• S3: AmazonS3FullAccess or custom S3 policy
• DynamoDB: AmazonDynamoDBFullAccess or custom DynamoDB policy
• Lambda: AWSLambdaFullAccess or custom Lambda policy
• SES: AmazonSESFullAccess or custom SES policy
• Multiple services: Attach multiple policies or create a custom policy combining permissions
3. Example custom policy for S3 + DynamoDB:

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "s3:PutObject", "s3:GetObject", "s3:DeleteObject", "s3:ListBucket",
        "dynamodb:PutItem", "dynamodb:GetItem", "dynamodb:Query", "dynamodb:Scan"
      ],
      "Resource": [
        "arn:aws:s3:::YOUR_BUCKET_NAME/*",
        "arn:aws:dynamodb:YOUR_REGION:YOUR_ACCOUNT_ID:table/*"
      ]
    }
  ]
}

4. Generate access keys:
• Under Security credentials, click Create access key.
• Choose Application running outside AWS as the use case.
• Copy your Access Key ID and Secret Access Key.
5. Example credentials:
• Access Key ID: AKIAIOSFODNN7EXAMPLE
• Secret Access Key: wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY

1. Go to Integrations → Add AWS in your app settings.
2. Enter your AWS Access Key ID and AWS Secret Access Key.
3. (Optional) Select your AWS Region (e.g., us-east-1, eu-west-1). Defaults to us-east-1.
4. (Optional) Enter an AWS Endpoint URL if using S3-compatible services:
• MinIO: http://localhost:9000 or your MinIO server URL
• Cloudflare R2: https://<account-id>.r2.cloudflarestorage.com
• DigitalOcean Spaces: https://<region>.digitaloceanspaces.com
• Leave blank for standard AWS services.
5. Click Connect to validate and save your integration.

Once connected, your app can access AWS services using boto3.

• IAM permissions: Ensure your IAM user has the necessary permissions for the AWS services you plan to use. Attach service-specific policies (e.g., AmazonS3FullAccess, AmazonDynamoDBFullAccess, AWSLambdaFullAccess) or create custom policies with least-privilege access.
• AWS Region: Most AWS services are region-specific. Select the correct region where your resources are located (e.g., S3 buckets, DynamoDB tables, Lambda functions).
• Cost management: Monitor AWS usage and costs through the AWS Billing Dashboard. Set up billing alerts to avoid unexpected charges.
• Security: Rotate your access keys regularly and enable MFA for AWS console access. Apply least-privilege IAM policies to limit permissions to only what's needed.
• S3-compatible services: For S3 operations, this integration works with S3-compatible storage like MinIO (self-hosted), Cloudflare R2 (zero egress fees), and DigitalOcean Spaces. Just provide the custom endpoint URL in the configuration.
• Service availability: Not all AWS services are available in all regions. Check the AWS Regional Services List for service availability.