Amazon S3 Connector

<\!-- Page header --> <\!-- Step indicator -->

1Connect

2Select Files

3Process

4Download

<\!-- ═══ STEP 1: Connect ═══ -->

<\!-- Left: Connection form -->

S3 Credentials

Enter your bucket details and IAM access keys.

Bucket Name

Region

Access Key ID

Secret Access Key (not stored)

Path Prefix (optional)

File Format

<\!-- Right: Setup instructions -->

IAM Setup 3 steps

Create IAM User with S3 Read Access

Go to IAM console → Users → Create user. Attach the managed policy AmazonS3ReadOnlyAccess directly, or use a custom policy below.

{ "Effect": "Allow", "Action": ["s3:GetObject", "s3:ListBucket"], "Resource": [ "arn:aws:s3:::YOUR-BUCKET", "arn:aws:s3:::YOUR-BUCKET/*" ] }

Generate Access Keys

IAM → Users → your user → Security credentials → Create access key. Choose Application running outside AWS. Copy the Access Key ID and Secret immediately — the secret is shown only once.

Verify Bucket Policy Allows Access

If your bucket has a restrictive bucket policy, ensure it allows s3:GetObject and s3:ListBucket for your IAM user's ARN.

{ "Principal": { "AWS": "arn:aws:iam::ACCOUNT:user/adam-reader" }, "Action": ["s3:GetObject", "s3:ListBucket"], "Effect": "Allow" }

Credentials are used only for this session and are never stored permanently. We recommend using a read-only IAM user.

<\!-- ═══ STEP 2: Select Files ═══ -->

Select Files

Choose files or prefixes to pull and anonymise.

0 items selected

s3://my-data-bucket/

<\!-- File rows rendered by JS -->

<\!-- ═══ STEP 3: Process ═══ -->

Processing

Pulling files from S3 and scanning for PII.

Preparing… 0%

<\!-- ═══ STEP 4: Download ═══ -->

Anonymised Results

Select a file to preview, then download.

Download All Files

Download the complete anonymised dataset.

📄

CSV Bundle

All files anonymised and exported as CSV in a zip archive

🗜

Parquet Export

Columnar format with full type preservation and provenance

{ }

JSON Export

JSONL with metadata and lineage record per file

📊

PII Report

Audit report listing all detected PII fields and anonymisation methods

Provenance Record

Full lineage metadata for this run.