S3 Connections
S3 connections let you integrate Amazon S3 or any S3-compatible storage service with your Zedoc pipelines. This includes services like MinIO, Cloudflare R2, and DigitalOcean Spaces.
Creating an S3 Connection
- Go to Organization Settings > Connections
- Click Add Connection
- Select Amazon S3 / S3-Compatible
- Choose the provider type and fill in the configuration fields
- Click Test Connection to verify your credentials
- Once the test passes, click Create Connection
Provider Types
When creating an S3 connection, you choose between two provider types:
AWS S3
For standard Amazon S3 buckets.
S3-Compatible
For non-AWS services that implement the S3 API (e.g. MinIO, Cloudflare R2, DigitalOcean Spaces).
Configuration Fields
| Field | AWS S3 | S3-Compatible | Description |
|---|---|---|---|
| Connection Name | Required | Required | A friendly name to identify this connection |
| Bucket Name | Required | Required | The bucket or container name (e.g. my-publisher-bucket) |
| Region | Required | Optional | The AWS region (e.g. us-east-1). May be required by some S3-compatible providers. |
| Endpoint URL | — | Required | The service endpoint (e.g. https://s3.example.com) |
| Access Key ID | Required | Required | An IAM or service access key with permissions to the bucket |
| Secret Access Key | Required | Required | The corresponding secret key |
| Path Prefix | Optional | Optional | A prefix prepended to all file paths (e.g. zedoc/output/) |
IAM Permissions
The IAM user or role associated with your access key needs the following permissions on the target bucket:
s3:PutObject— Upload filess3:GetObject— Download filess3:ListBucket— List bucket contents (used during connection testing)
A minimal IAM policy example:
{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Action": ["s3:PutObject", "s3:GetObject", "s3:ListBucket"],
"Resource": ["arn:aws:s3:::my-publisher-bucket", "arn:aws:s3:::my-publisher-bucket/*"]
}
]
} Editing an S3 Connection
You can update any field of an existing connection from the connections list. When editing, credential fields are blank by default — leave them empty to keep the current credentials, or enter new values to update them.
After making changes, you must test the connection again before saving.
S3-Compatible Services
Here are common S3-compatible services and their typical endpoint formats:
| Service | Endpoint Format |
|---|---|
| MinIO | https://minio.example.com or http://localhost:9000 |
| Cloudflare R2 | https://<account-id>.r2.cloudflarestorage.com |
| DigitalOcean Spaces | https://<region>.digitaloceanspaces.com |
| Backblaze B2 | https://s3.<region>.backblazeb2.com |
| Wasabi | https://s3.<region>.wasabisys.com |