---
title: "S3"
slug: "aws-s3-step-glossary"
description: "Learn how to use AWS S3 steps in Decisions to manage files in Amazon S3, including creating folders, uploading files, retrieving file contents, listing objects, deleting files, setting ACL permissions, and configuring S3 credentials."
updated: 2026-08-13T16:47:38Z
published: 2026-08-13T16:47:38Z
canonical: "documentation.decisions.com/aws-s3-step-glossary"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://documentation.decisions.com/llms.txt
> Use this file to discover all available pages before exploring further.

# S3

| Feature Details |
| --- |
| **Introduced in Version** | -- |
| **Modified in Version** | 10.1 |

## Overview

The Amazon Web Services (AWS) Module allows users to manage files on the AWS S3 cloud-based storage.

The AWS module provides pre-built Flow steps that allow users to store or delete files on the Amazon S3 file storage system found in the Flow Designer via **Toolbox > Integration > Amazon AWS > S3**.

For steps requiring the **Region** input, use the region code instead of the region name. Region codes can be found in [AWS documentation](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Concepts.RegionsAndAvailabilityZones.html).Prerequisite:

- [Installation](/version-10/docs/installing-modules-decisions) of the AWS module.
- [Configuration](/version-10/docs/setting-up-amazon-webservices-integration) of the AWS module.
- Active AWS account and application

### Temporary Credentials / Override Role Credentials

Users can now specify temporary credentials to access an S3 bucket:

This is done by specifying an IAM user's access key and secret key in Amazon AWS settings, then having a trust relationship between that user and a role that has elevated permissions. The externalID is a unique string that is a condition for the trust relationship. Also, all the S3 steps now have a new property: **Override Role Credentials**, where the user can have different temporary credentials than what is specified in [Amazon WebServices Settings](https://documentation.decisions.com/version-10/docs/setting-up-amazon-webservices-integration).

![](https://cdn.document360.io/6ef8bcc1-6489-4486-9ad1-83acff7e5df0/Images/Documentation/image-1779391634061.png)

## S3 Steps

Certificate Authentication (v10.1+)Users can now authenticate to AWS for S3 steps via certificate authentication. This setting can be enabled by navigating to **Global Settings > Amazon WebServices Settings** and enabling **Use Certificate Authentication for S3**. The following table details all the steps located at **Toolbox > Integration > Amazon AWS > S3.**

| Step Name | Description | Inputs/Outputs |
| --- | --- | --- |
| [**Create Folder**](https://documentation.decisions.com/step-library/docs/create-folder-2) | The **Create Folder** step generates a Folder in Amazon S3 for file storage. | Inputs: Override Role Credentials (AssumeRoleCredentials), Bucket (String), Folder (String), Region (AmazonAWSRegion) |
| Outputs: N/A |
| [**Delete File From S3**](https://documentation.decisions.com/step-library/docs/delete-file-from-s3) | The **Delete File From S3** removes the specified file from Amazon S3. | Inputs: Override Role Credentials (AssumeRoleCredentials), Bucket Name (String), Key (String), Region (AmazonAWSRegion) |
| Outputs: N/A |
| [**Get Client**](https://documentation.decisions.com/step-library/docs/get-client) | The **Get Client** step grabs client information based on the region, then outputs it. | Inputs: Override Role Credentials (AssumeRoleCredentials), Region (AmazonAWSRegion) |
| Outputs: GetClient1_Output (Amazon.S3.AmazonS3Client) |
| [**Get File Contents**](https://documentation.decisions.com/step-library/docs/get-file-contents) | The **Get File Contents** step grabs file information of a specified file, then outputs it. | Inputs: Override Role Credentials (AssumeRoleCredentials), Bucket Name (String), File Name (String), Region (AmazonAWSRegion) |
| Outputs: GetFileContents1_Output (Byte[]) |
| [**Get File From S3 And Store At**](https://documentation.decisions.com/step-library/docs/get-file-from-s3-and-store-at) | The **Get File From S3 And Store At** step retrieves a file from S3 and stores it in the location specified in the Local File to Store input. | Inputs: Override Role Credentials (AssumeRoleCredentials), Bucket Name (String), File Name (String), Local File To Store (String), Region (AmazonAWSRegion) |
| Output: N/A |
| [**List Objects**](https://documentation.decisions.com/step-library/docs/list-objects) | The **List Objects** step lists the Objects in the specified Amazon S3 bucket, then outputs them. | Inputs: Override Role Credentials (AssumeRoleCredentials), Bucket Name (String) |
| Outputs: ListObjects1_Output (S3ObjectData[]) |
| [**List Objects with Text Prefix**](https://documentation.decisions.com/step-library/docs/list-objects-with-text-prefix) | The **List Objects with Text Prefix** step lists the objects in Amazon S3 with the specified text prefix. | Inputs: Override Role Credentials (AssumeRoleCredentials), Bucket Name (String), Prefix (String), Region (AmazonAWSRegion) |
| Outputs: ListObjectswithTextPrefix1_Output (S3ObjectData[]) |
| [**Put File in S3 From File Location**](https://documentation.decisions.com/step-library/docs/put-file-in-s3-from-file-location) | The **Put File in S3 From File Location** step adds a file to S3 from a specified local file storage location. | Inputs: Override Role Credentials (AssumeRoleCredentials), Bucket Name (String), File Name To Store (String), Path To File on Workflow Server (String), Region (AmazonAWSRegion) |
| Outputs: PutFileInS3FromFileLocation1_Output (String) |
| [**Put File in S3 From File Location with ACL**](https://documentation.decisions.com/step-library/docs/put-file-in-s3-from-file-location-with-acl) | The **Put File In S3 From File Location With ACL** step takes a file with ACL from its specified location and moves it into the specified S3 bucket. | Inputs: Override Role Credentials (AssumeRoleCredentials), ACL (S3CannedACLWrapper), Bucket Name (String), File Name To Store (String), Path To File on Workflow Server (String), Region (AmazonAWSRegion) |
| Outputs: PutFileInS3FromFileLocationWithACL1_Output (String) |
| [**Put File in S3 with ACL**](https://documentation.decisions.com/step-library/docs/put-file-in-s3-with-acl) | The **Put File In S3 With ACL** step sets ACL permissions on a specified file in the specified S3 bucket. | Inputs: Override Role Credentials (AssumeRoleCredentials), ACL (S3CannedACLWrapper), Bucket Name (String), File (String), File Name to Store (String), Region (AmazonAWSRegion) |
| Outputs: PutFileInS3WithACL1_Output (String) |
| [**Put File in S3**](https://documentation.decisions.com/step-library/docs/put-file-in-s3) | The **Put File In S3** step adds a specified file to the specified S3 bucket. | Inputs: Override Role Credentials (AssumeRoleCredentials), Bucket Name (String), File (String), File Name to Store (String), Region (AmazonAWSRegion) |
| Outputs: PutFileInS31_Output (String) |
| [**Set ACL On File**](https://documentation.decisions.com/step-library/docs/set-aclon-file) | The **Set ACL On File** step sets ACL permissions on a specified file. To find the canonical user ID, refer to [AWS Documentation.](https://docs.aws.amazon.com/AmazonS3/latest/userguide/finding-canonical-user-id.html) | Inputs: Override Role Credentials (AssumeRoleCredentials), Bucket Name (String), Canonical User ID (String), File Name (String), Permissions To Set (S3PermissionWrapper[]), Region (AmazonAWSRegion) |
| Outputs: N/A |
| [**Set Canned ACL On File**](https://documentation.decisions.com/step-library/docs/set-canned-aclon-file) | The **Set Canned ACL On File** sets the chosen canned ACL wrapper via the ACL To Set input on a specified file via the File Name input. | Inputs: Override Role Credentials (AssumeRoleCredentials), ACL To Set (S3CannedACLWrapper), Bucket Name (String), File Name (String), Region (AmazonAWSRegion) |
| Outputs: N/A |

---

## Feature Changes

| Description | Version | Release Date | Developer Task |
| --- | --- | --- | --- |
| Users can now authenticate AWS for S3 steps via certificate authentication. | 10.1 | August 2026 | [DT-048199] |