Connect Amazon S3

Use the S3 connector for Amazon S3 or compatible object storage such as MinIO, Cloudflare R2, Alibaba Cloud OSS or Tencent Cloud COS. You can import a file as a local snapshot or, when your plan allows it, link a Parquet object without copying its rows.

Before you start

Do not use a root or write-enabled cloud credential. The Secret Access Key is encrypted and is not shown again.

1. Create the connection

  1. Open Data.
  2. Choose Add → Connection → AWS S3.
  3. Enter:
    • Region
    • Access Key ID
    • Secret Access Key
    • an optional default Bucket
    • an optional custom Endpoint
  4. For a custom endpoint, choose the addressing style:
    • Auto detect is recommended.
    • Path style is normally used by MinIO and R2.
    • Virtual-host style is required by Alibaba Cloud OSS and Tencent Cloud COS.
  5. Save the connection.

When editing an existing connection, leave the Secret Access Key blank to keep it. Enter a value only when rotating the credential.

2. Choose and import an object

  1. Find the S3 connection and choose Import rows.
  2. Enter the bucket. It is prefilled when the connection has a default bucket.
  3. Enter a prefix to browse a folder-like section of the bucket, or enter the exact object key.
  4. Choose a supported object:
    • CSV
    • TSV
    • XLSX
    • JSON
    • Parquet
  5. Import it and review the proposed metrics.

If a large bucket does not show the expected file, use a narrower prefix. Object browsing scans a bounded result set rather than every key in an unlimited bucket.

Snapshot import or zero-copy

Snapshot import copies rows into the workspace query engine. Refresh downloads the same bucket and key again and replaces the previous snapshot.

External (zero-copy) leaves rows in S3 and stores only the metadata needed to query them. It:

Use snapshot mode when you need local transformations or when the source is CSV, TSV, XLSX or JSON. Use zero-copy when Parquet must remain in your bucket and live reads are preferred.

Refresh and changes

For snapshot datasets, refresh re-downloads the same object. If refresh fails, the last successful snapshot remains available.

For zero-copy datasets, refresh validates reachability, schema and metadata rather than copying rows. Replacing a Parquet object with an incompatible schema can stop queries, so publish source changes carefully.

Troubleshooting

Invalid Access Key ID

Check for a typo or a deleted key.

Signature does not match

Re-enter the Secret Access Key and verify the region, endpoint and addressing style.

Access denied

The credential is valid but lacks bucket or object permission. Check IAM and bucket policies for ListBucket and GetObject.

Bucket or object not found

Check the bucket name, prefix and exact object key. Object keys are case-sensitive.

No supported objects appear

Narrow the prefix and confirm that the file extension is .csv, .tsv, .xlsx, .json or .parquet.

Zero-copy is unavailable

Confirm that the feature is included in the current plan and that the selected object is Parquet.

Next