Skip to main content
The S3 connector lists and reads. It never uploads, changes or deletes an object. Setup and the IAM policy are on the AWS page.

​
Tools

​
Limits

Get Object reads text only: a textual content type or a known text extension (.log, .json, .csv, .yaml, .txt, …). Binary and compressed objects are refused. Objects over 256 KB are refused with their size unless you pass max_bytes (up to 256 KB); then the first max_bytes bytes come back with truncated: true. Nothing is downloaded before the size and type are checked. A bucket in another region than the connection’s is followed automatically.

​
Safety

  • No write tools. Scope s3:GetObject in the IAM policy to the buckets and prefixes agents should read.
  • The object’s text is returned as is. Do not point agents at objects that hold secrets.

​
Example prompts

  • “List the newest files under s3://my-app-logs/exports/2026/09/.”
  • “Read config/feature-flags.yaml from my-app-config.”
  • “Show the first 64 KB of s3://my-app-logs/worker/2026-09-26.log.”