🇬🇧 EN

☁️ Amazon S3

Reads and writes objects in Amazon S3 or any S3-compatible storage service (MinIO, Cloudflare R2, Backblaze B2). Supports downloading object content, uploading new objects, and generating pre-signed URLs for temporary access.

Category: File Operations · Type identifier: amazon_s3

Overview

The Amazon S3 node gives Flusso workflows access to AWS S3 object storage and any storage service that exposes an S3-compatible API. Objects (files) in S3 are identified by a key — the full path of the object within the bucket, e.g. reports/2025/january.csv.

In addition to reading and writing objects, this node can generate pre-signed URLs — time-limited download links that allow external users to access a private object without requiring AWS credentials. This is useful for sharing generated files via email or webhook without making the bucket public.

Configuration

Field	Status	Description
Access Key ID	Required	AWS access key ID or equivalent for S3-compatible services.
Secret Access Key	Required	AWS secret access key.
Region	Required	AWS region, e.g. `us-east-1`. For S3-compatible services, enter the appropriate region or use `auto`.
Bucket	Required	The S3 bucket name.
Operation	Required	`get` — download object content. `put` — upload an object. `presign` — generate a pre-signed download URL.
Key	Required	The object key (path within the bucket), e.g. `reports/2025/january.csv`. Supports `{{ variable }}` references.
Body	Required for put	Content to upload. Supports `{{ variable }}` references.
Content Type	Optional for put	MIME type of the uploaded object, e.g. `application/json`. Default: `text/plain`.
Expires In	Optional for presign	Pre-signed URL expiry in seconds. Default: `3600` (1 hour).
Endpoint URL	Optional	Custom endpoint for S3-compatible services, e.g. `https://s3.eu-central-1.amazonaws.com`. Leave blank to use the standard AWS endpoint.

Output Data

Available output fields depend on the selected operation.

Field	Type	Description
`content`	string	Object content (get mode).
`url`	string	Pre-signed URL (presign mode).
`key`	string	Object key.
`bucket`	string	Bucket name.
`size`	number	Object size in bytes (get mode).
`etag`	string	ETag of the uploaded object (put mode).

Example Usage

An Agent node generates a JSON report.
An Amazon S3 node with Operation: put uploads the JSON to reports/{{ trigger.output.run_id }}.json.
A second Amazon S3 node with Operation: presign generates a one-hour download URL for the same key.
An Email Notification node sends the pre-signed URL to a stakeholder so they can download the report without needing AWS access.

Tips & Notes

S3 does not have real folders — the / character in object keys is a naming convention. Any string can be used as a key prefix to organise objects logically.
Pre-signed URLs expire after the configured Expires In period. Generate them close to when they will be used, or increase the expiry for longer-lived links.
For S3-compatible services such as MinIO or Cloudflare R2, set the Endpoint URL to the service's API endpoint and use auto as the region if the service requires it.
The etag returned by a put operation is an MD5 hash of the uploaded content, useful for verifying integrity in downstream steps.
Store the Secret Access Key as a workflow secret (via the Credentials drawer) rather than embedding it as plain text in the configuration.

Related Nodes

Local File — server-local file storage without cloud credentials.
Google Drive — Google cloud storage with Drive sharing features.
Dropbox — Dropbox cloud file storage.
HTTP Request — make arbitrary HTTP calls, useful for pre-signed URL delivery.