Amazon S3 policy

An Amazon S3 policy contains the connection details that are used by an Amazon S3 Request node when connecting to an Amazon S3 application.

You can use an Amazon S3 Request node in a message flow to connect IBM® App Connect Enterprise to Amazon S3 applications and issue requests to create, retrieve, update, and delete objects. The Amazon S3 policy controls, at run time, the access to the Amazon S3 application.

The Amazon S3 policy is created when you configure a connection between an Amazon S3 Request node and Amazon S3 by using the Connector Discovery wizard. During the process of discovery, account credentials are stored in the vault and connection details are stored in an Amazon S3 policy. The policy is created with a type of Amazon S3, and the name of the policy is returned to the Amazon S3 Request node and specified in the Connection tab of the node, in the format {policyProjectName}:policyName.

You can also create, update, or delete an Amazon S3 policy by using the Manage Discovery Connector Policies and Credentials wizard, which you can access by right-clicking the policy project in the IBM App Connect Enterprise Toolkit and then clicking New > Discovery Connector policies and credentials.

You must deploy this policy before message flows that use the policy are started. If you redeploy an Amazon S3 policy, all message flows that are using the policy will be stopped and restarted.

For more information about using Amazon S3 policies, see Using Amazon S3 with IBM App Connect Enterprise.

Table 1. Properties of the Amazon S3 policy
Property	Property name in .policyxml file	Description of properties
Credential Name	credentialName	This property specifies the name of the credential that will be used for the connection to Amazon S3. The specified credential can be defined during connector discovery and stored in the vault. Alternatively, you can specify an existing credential that was configured by using the mqsicredentials command or the server.conf.yaml file, or loaded through an external credential provider.
Region	region	This property specifies the region of the Amazon S3 instance (if any) that was specified by the Region property during connector discovery.
Amazon S3 Authentication method	authenticationMethod	This property is reserved for future use and must be set to the value `BASIC` or `BASIC_OIDC`.
Amazon S3 Application Type	applicationType	This property is reserved for future use and must be set to the value `online`.
Amazon S3 Application Version	applicationVersion	This property is reserved for future use and must be set to the value `v1`.
Proxy name	proxyId	This property specifies the name of the HTTP Proxy policy that contains details of the HTTP Proxy server URL and the HTTPProxy credential used to make the connection.