Amazon S3

​

Before you begin

• An AWS account with permission to create a bucket and edit its bucket policy.
• Kadoa’s AWS principal ARN, provided by Support. Your bucket policy grants access without sharing AWS keys.
• A bucket in any AWS region. Kadoa uses SSE-S3 encryption by default.

​

Prepare the bucket

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Principal": { "AWS": "<KADOA_AWS_PRINCIPAL_ARN>" },
      "Action": ["s3:PutObject", "s3:DeleteObject", "s3:AbortMultipartUpload", "s3:ListBucket"],
      "Resource": ["arn:aws:s3:::<YOUR_BUCKET>/<PREFIX>/*", "arn:aws:s3:::<YOUR_BUCKET>"]
    }
  ]
}

​

Request the integration

​

Verify the first delivery

aws s3 ls "s3://<YOUR_BUCKET>/<PREFIX>/" --recursive

• Confirm one file per selected format exists for that run.
• Confirm each data file’s row count matches the same run in the dashboard.
• Run the workflow again. With the default path template, confirm that the new run has a new folder.

​

What’s next