> ## Documentation Index
> Fetch the complete documentation index at: https://docs.danubeai.com/llms.txt
> Use this file to discover all available pages before exploring further.

# AWS S3

> Let agents browse buckets and read small text objects such as configs, exports and logs

The S3 connector lists and reads. It never uploads, changes or deletes an object. Setup and the IAM policy are on the [AWS page](/connectors/aws#s3).

## Tools

| Tool                | What it returns                                                                                                                                                    |
| ------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
| **Test Connection** | The AWS account and identity, and whether it may list buckets                                                                                                      |
| **List Buckets**    | Bucket names and creation dates                                                                                                                                    |
| **List Objects**    | Objects under a prefix with size, last modified time and storage class; with delimiter `/`, one folder level and its sub-folders; `continuation_token` to continue |
| **Head Object**     | Size, content type, last modified, ETag, storage class, encryption, version and user metadata                                                                      |
| **Get Object**      | The object's text, as UTF-8                                                                                                                                        |

## Limits

Get Object reads text only: a textual content type or a known text extension (`.log`, `.json`, `.csv`, `.yaml`, `.txt`, ...). Binary and compressed objects are refused. Objects over 256 KB are refused with their size unless you pass `max_bytes` (up to 256 KB); then the first `max_bytes` bytes come back with `truncated: true`. Nothing is downloaded before the size and type are checked.

A bucket in another region than the connection's is followed automatically.

## Safety

* No write tools. Scope `s3:GetObject` in the IAM policy to the buckets and prefixes agents should read.
* The object's text is returned as is. Do not point agents at objects that hold secrets.

## Example prompts

* "List the newest files under `s3://my-app-logs/exports/2026/09/`."
* "Read `config/feature-flags.yaml` from `my-app-config`."
* "Show the first 64 KB of `s3://my-app-logs/worker/2026-09-26.log`."