aws connectors¶
Amazon Web Services integrations. 46 connectors covering compute, storage, messaging, databases, ML, security, networking, and CI/CD. All 46 are now wired to aws-sdk-go-v2 for binary protocol fidelity, IAM credential-chain support (env vars, shared profile, EC2 instance role, ECS task role), and full operation coverage. Every connector accepts an endpoint field for LocalStack / VPC-endpoint scenarios. signing.go is an internal SigV4 helper, kept only for backwards-compatible imports.
Connectors in this category¶
| Connector | URI / type | Auth | Native SDK | One-line description |
|---|---|---|---|---|
aws_api_gateway |
connector://aws-apigw/send |
IAM credential chain | Yes (aws-sdk-go-v2/service/apigatewayv2) |
API Gateway v2 HTTP/WebSocket API management (apis, routes, stages). |
aws_athena |
connector://aws-athena/send |
IAM SigV4 | No (HTTP) | Athena interactive SQL query execution against S3. |
aws_cloudformation |
connector://aws-cfn/send |
IAM SigV4 | No (HTTP) | CloudFormation stack create / update / describe / delete. |
aws_cloudtrail |
connector://aws-cloudtrail/send |
IAM SigV4 | No (HTTP) | CloudTrail audit-log lookup and event delivery. |
aws_cloudwatch |
connector://aws-cw/send |
IAM SigV4 | No (HTTP) | CloudWatch metrics + logs put / get. |
aws_codebuild |
connector://aws-codebuild/send |
IAM SigV4 | No (HTTP) | CodeBuild project starts / status. |
aws_codecommit |
connector://aws-codecommit/send |
IAM SigV4 | No (HTTP) | CodeCommit Git repo + branch + commit ops. |
aws_codepipeline |
connector://aws-codepipeline/send |
IAM SigV4 | No (HTTP) | CodePipeline executions and stage transitions. |
aws_comprehend |
connector://aws-comprehend/send |
IAM SigV4 | No (HTTP) | Comprehend NLP (sentiment, entities, key phrases, PII). |
aws_config_service |
connector://aws-config/send |
IAM SigV4 | No (HTTP) | AWS Config compliance rule + resource queries. |
aws_ddb_streams |
connector://aws-ddb-streams/send |
IAM credential chain | Yes (aws-sdk-go-v2/service/dynamodbstreams) |
DynamoDB Streams list/describe + shard-iterator + get-records. |
aws_dynamodb |
connector://aws-ddb/send |
IAM credential chain | Yes (aws-sdk-go-v2/service/dynamodb) |
DynamoDB GetItem / PutItem / Query / Scan / Delete / BatchWrite. |
aws_ec2 |
connector://aws-ec2/send |
IAM credential chain | Yes (aws-sdk-go-v2/service/ec2) |
EC2 instance lifecycle (describe/run/stop/start/terminate). |
aws_ecr |
connector://aws-ecr/send |
IAM SigV4 | No (HTTP) | Elastic Container Registry image lookup. |
aws_ecs |
connector://aws-ecs/send |
IAM SigV4 | No (HTTP) | ECS task definition / service / cluster ops. |
aws_eks |
connector://aws-eks/send |
IAM SigV4 | No (HTTP) | EKS cluster + node-group describe / list. |
aws_elasticache |
connector://aws-elasticache/send |
IAM credential chain | Yes (aws-sdk-go-v2/service/elasticache) |
ElastiCache (Redis/Memcached) cluster + replication-group ops. |
aws_eventbridge |
connector://aws-eb/send |
IAM credential chain | Yes (aws-sdk-go-v2/service/eventbridge) |
EventBridge PutEvents + rule management. |
aws_glue |
connector://aws-glue/send |
IAM SigV4 | No (HTTP) | Glue catalog + ETL job control. |
aws_iam |
connector://aws-iam/send |
IAM SigV4 | No (HTTP) | IAM users / roles / policies / access keys. |
aws_kinesis |
connector://aws-kinesis/send |
IAM credential chain | Yes (aws-sdk-go-v2/service/kinesis) |
Kinesis Data Stream PutRecord / PutRecords / GetRecords. |
aws_kinesis_firehose |
connector://aws-firehose/send |
IAM credential chain | Yes (aws-sdk-go-v2/service/firehose) |
Kinesis Data Firehose put-record + put-record-batch + describe / list. |
aws_kms |
connector://aws-kms/send |
IAM SigV4 | No (HTTP) | KMS encrypt / decrypt / generate data key. |
aws_lambda |
connector://aws-lambda/send |
IAM credential chain | Yes (aws-sdk-go-v2/service/lambda) |
Lambda Invoke (sync / async / dry run). |
aws_mq |
connector://aws-mq/send |
IAM credential chain | Yes (aws-sdk-go-v2/service/mq) |
Amazon MQ broker control plane (ActiveMQ + RabbitMQ). |
aws_msk |
connector://aws-msk/send |
IAM credential chain | Yes (aws-sdk-go-v2/service/kafka) |
Managed Streaming for Kafka cluster + node + bootstrap-broker ops. |
aws_parameter_store |
connector://aws-ssm/send |
IAM credential chain | Yes (aws-sdk-go-v2/service/ssm) |
Systems Manager Parameter Store get / put / delete / list / by-path. |
aws_polly |
connector://aws-polly/send |
IAM SigV4 | No (HTTP) | Polly text-to-speech synthesis. |
aws_rds |
connector://aws-rds/send |
IAM credential chain | Yes (aws-sdk-go-v2/service/rds) |
RDS DBInstance + snapshot + cluster control. |
aws_redshift |
connector://aws-redshift/send |
IAM credential chain | Yes (aws-sdk-go-v2/service/redshiftdata) |
Redshift Data API execute / describe / get-result / cancel. |
aws_rekognition |
connector://aws-rek/send |
IAM SigV4 | No (HTTP) | Rekognition image + video analysis. |
aws_route53 |
connector://aws-r53/send |
IAM credential chain | Yes (aws-sdk-go-v2/service/route53) |
Route 53 hosted zones + record sets + test-dns-answer. |
aws_s3 |
connector://aws-s3/send |
IAM credential chain | Yes (aws-sdk-go-v2/service/s3) |
S3 object GetObject / PutObject / DeleteObject / ListObjects + multipart. |
aws_sagemaker |
connector://aws-sm/send |
IAM credential chain | Yes (aws-sdk-go-v2/service/sagemaker + service/sagemakerruntime) |
SageMaker control plane + endpoint invoke. |
aws_secrets_manager |
connector://aws-secrets/send |
IAM credential chain | Yes (aws-sdk-go-v2/service/secretsmanager) |
Secrets Manager GetSecretValue / CreateSecret / UpdateSecret. |
aws_security_hub |
connector://aws-securityhub/send |
IAM credential chain | Yes (aws-sdk-go-v2/service/securityhub) |
Security Hub findings + standards + insights + members. |
aws_ses |
connector://aws-ses/send |
IAM credential chain | Yes (aws-sdk-go-v2/service/sesv2) |
SES v2 send-email / send-raw / list-identities / verify / get-quota. |
aws_sns |
connector://aws-sns/send |
IAM credential chain | Yes (aws-sdk-go-v2/service/sns) |
SNS topic Publish / Subscribe / CreateTopic / SetAttributes. |
aws_sqs |
connector://aws-sqs/send |
IAM credential chain | Yes (aws-sdk-go-v2/service/sqs) |
SQS standard + FIFO SendMessage / ReceiveMessage / DeleteMessage. |
aws_step_functions |
connector://aws-sfn/send |
IAM credential chain | Yes (aws-sdk-go-v2/service/sfn) |
Step Functions list/describe state-machines + start/describe/list/stop executions. |
aws_sts |
connector://aws-sts/send |
IAM SigV4 | No (HTTP) | STS AssumeRole / GetSessionToken / GetCallerIdentity. |
aws_textract |
connector://aws-textract/send |
IAM SigV4 | No (HTTP) | Textract document analysis (forms, tables, AnalyzeDocument). |
aws_transcribe |
connector://aws-transcribe/send |
IAM SigV4 | No (HTTP) | Transcribe speech-to-text job. |
aws_translate |
connector://aws-translate/send |
IAM SigV4 | No (HTTP) | Translate TranslateText / TranslateDocument. |
aws_waf |
connector://aws-waf/send |
IAM SigV4 | No (HTTP) | WAF web ACLs and rule groups. |
aws_bedrock |
connector://aws-bedrock/send |
IAM credential chain | Yes (aws-sdk-go-v2/service/bedrockruntime) |
Bedrock InvokeModel — Claude, Titan, Llama, Mistral, etc. |
signing |
(internal helper) | n/a | n/a | Shared AWS SigV4 request-signer used by HTTP connectors. |
signing.go is a helper, not a registered connector. The other 46 register via init().
Native-SDK deep section¶
aws_s3¶
Source: pkg/connector/connectors/aws/s3.go. Uses aws-sdk-go-v2/service/s3 with the v2 credential chain. Supports binary multipart uploads, range GETs, and presigned URLs.
connectors:
s3:
type: aws_s3
config:
region: us-east-1
bucket: my-bucket
# Optional explicit credentials; otherwise IAM role / env / shared file
access_key_id: ${AWS_ACCESS_KEY_ID}
secret_access_key: ${AWS_SECRET_ACCESS_KEY}
Send a PutObject by setting headers operation=put, key=path/to/object; the exchange body becomes the object body.
aws_sqs¶
Source: pkg/connector/connectors/aws/sqs.go. Outbound SendMessage and inbound long-polling ReceiveMessage (with DeleteMessage after handler returns).
connectors:
events-out:
type: aws_sqs
config:
region: us-east-1
queue_url: https://sqs.us-east-1.amazonaws.com/123456789012/events
aws_dynamodb, aws_lambda, aws_kinesis, aws_sns, aws_eventbridge, aws_ec2, aws_rds, aws_secrets_manager¶
Same pattern: typed v2 service clients, set the operation via exchange header, body is the operation request payload (JSON or struct). See the Connector SDK guide for a full walk-through.
See also¶
- Connector SDK guide — adding native-SDK connectors
pkg/component/s3/— the first-class S3 component for high-volume pipelines- IAM credential chain: standard
aws-sdk-go-v2resolution order (env vars → shared file → IMDS → ECS task role)