Skip to content

aws connectors

Amazon Web Services integrations. 46 connectors covering compute, storage, messaging, databases, ML, security, networking, and CI/CD. All 46 are now wired to aws-sdk-go-v2 for binary protocol fidelity, IAM credential-chain support (env vars, shared profile, EC2 instance role, ECS task role), and full operation coverage. Every connector accepts an endpoint field for LocalStack / VPC-endpoint scenarios. signing.go is an internal SigV4 helper, kept only for backwards-compatible imports.

Connectors in this category

Connector URI / type Auth Native SDK One-line description
aws_api_gateway connector://aws-apigw/send IAM credential chain Yes (aws-sdk-go-v2/service/apigatewayv2) API Gateway v2 HTTP/WebSocket API management (apis, routes, stages).
aws_athena connector://aws-athena/send IAM SigV4 No (HTTP) Athena interactive SQL query execution against S3.
aws_cloudformation connector://aws-cfn/send IAM SigV4 No (HTTP) CloudFormation stack create / update / describe / delete.
aws_cloudtrail connector://aws-cloudtrail/send IAM SigV4 No (HTTP) CloudTrail audit-log lookup and event delivery.
aws_cloudwatch connector://aws-cw/send IAM SigV4 No (HTTP) CloudWatch metrics + logs put / get.
aws_codebuild connector://aws-codebuild/send IAM SigV4 No (HTTP) CodeBuild project starts / status.
aws_codecommit connector://aws-codecommit/send IAM SigV4 No (HTTP) CodeCommit Git repo + branch + commit ops.
aws_codepipeline connector://aws-codepipeline/send IAM SigV4 No (HTTP) CodePipeline executions and stage transitions.
aws_comprehend connector://aws-comprehend/send IAM SigV4 No (HTTP) Comprehend NLP (sentiment, entities, key phrases, PII).
aws_config_service connector://aws-config/send IAM SigV4 No (HTTP) AWS Config compliance rule + resource queries.
aws_ddb_streams connector://aws-ddb-streams/send IAM credential chain Yes (aws-sdk-go-v2/service/dynamodbstreams) DynamoDB Streams list/describe + shard-iterator + get-records.
aws_dynamodb connector://aws-ddb/send IAM credential chain Yes (aws-sdk-go-v2/service/dynamodb) DynamoDB GetItem / PutItem / Query / Scan / Delete / BatchWrite.
aws_ec2 connector://aws-ec2/send IAM credential chain Yes (aws-sdk-go-v2/service/ec2) EC2 instance lifecycle (describe/run/stop/start/terminate).
aws_ecr connector://aws-ecr/send IAM SigV4 No (HTTP) Elastic Container Registry image lookup.
aws_ecs connector://aws-ecs/send IAM SigV4 No (HTTP) ECS task definition / service / cluster ops.
aws_eks connector://aws-eks/send IAM SigV4 No (HTTP) EKS cluster + node-group describe / list.
aws_elasticache connector://aws-elasticache/send IAM credential chain Yes (aws-sdk-go-v2/service/elasticache) ElastiCache (Redis/Memcached) cluster + replication-group ops.
aws_eventbridge connector://aws-eb/send IAM credential chain Yes (aws-sdk-go-v2/service/eventbridge) EventBridge PutEvents + rule management.
aws_glue connector://aws-glue/send IAM SigV4 No (HTTP) Glue catalog + ETL job control.
aws_iam connector://aws-iam/send IAM SigV4 No (HTTP) IAM users / roles / policies / access keys.
aws_kinesis connector://aws-kinesis/send IAM credential chain Yes (aws-sdk-go-v2/service/kinesis) Kinesis Data Stream PutRecord / PutRecords / GetRecords.
aws_kinesis_firehose connector://aws-firehose/send IAM credential chain Yes (aws-sdk-go-v2/service/firehose) Kinesis Data Firehose put-record + put-record-batch + describe / list.
aws_kms connector://aws-kms/send IAM SigV4 No (HTTP) KMS encrypt / decrypt / generate data key.
aws_lambda connector://aws-lambda/send IAM credential chain Yes (aws-sdk-go-v2/service/lambda) Lambda Invoke (sync / async / dry run).
aws_mq connector://aws-mq/send IAM credential chain Yes (aws-sdk-go-v2/service/mq) Amazon MQ broker control plane (ActiveMQ + RabbitMQ).
aws_msk connector://aws-msk/send IAM credential chain Yes (aws-sdk-go-v2/service/kafka) Managed Streaming for Kafka cluster + node + bootstrap-broker ops.
aws_parameter_store connector://aws-ssm/send IAM credential chain Yes (aws-sdk-go-v2/service/ssm) Systems Manager Parameter Store get / put / delete / list / by-path.
aws_polly connector://aws-polly/send IAM SigV4 No (HTTP) Polly text-to-speech synthesis.
aws_rds connector://aws-rds/send IAM credential chain Yes (aws-sdk-go-v2/service/rds) RDS DBInstance + snapshot + cluster control.
aws_redshift connector://aws-redshift/send IAM credential chain Yes (aws-sdk-go-v2/service/redshiftdata) Redshift Data API execute / describe / get-result / cancel.
aws_rekognition connector://aws-rek/send IAM SigV4 No (HTTP) Rekognition image + video analysis.
aws_route53 connector://aws-r53/send IAM credential chain Yes (aws-sdk-go-v2/service/route53) Route 53 hosted zones + record sets + test-dns-answer.
aws_s3 connector://aws-s3/send IAM credential chain Yes (aws-sdk-go-v2/service/s3) S3 object GetObject / PutObject / DeleteObject / ListObjects + multipart.
aws_sagemaker connector://aws-sm/send IAM credential chain Yes (aws-sdk-go-v2/service/sagemaker + service/sagemakerruntime) SageMaker control plane + endpoint invoke.
aws_secrets_manager connector://aws-secrets/send IAM credential chain Yes (aws-sdk-go-v2/service/secretsmanager) Secrets Manager GetSecretValue / CreateSecret / UpdateSecret.
aws_security_hub connector://aws-securityhub/send IAM credential chain Yes (aws-sdk-go-v2/service/securityhub) Security Hub findings + standards + insights + members.
aws_ses connector://aws-ses/send IAM credential chain Yes (aws-sdk-go-v2/service/sesv2) SES v2 send-email / send-raw / list-identities / verify / get-quota.
aws_sns connector://aws-sns/send IAM credential chain Yes (aws-sdk-go-v2/service/sns) SNS topic Publish / Subscribe / CreateTopic / SetAttributes.
aws_sqs connector://aws-sqs/send IAM credential chain Yes (aws-sdk-go-v2/service/sqs) SQS standard + FIFO SendMessage / ReceiveMessage / DeleteMessage.
aws_step_functions connector://aws-sfn/send IAM credential chain Yes (aws-sdk-go-v2/service/sfn) Step Functions list/describe state-machines + start/describe/list/stop executions.
aws_sts connector://aws-sts/send IAM SigV4 No (HTTP) STS AssumeRole / GetSessionToken / GetCallerIdentity.
aws_textract connector://aws-textract/send IAM SigV4 No (HTTP) Textract document analysis (forms, tables, AnalyzeDocument).
aws_transcribe connector://aws-transcribe/send IAM SigV4 No (HTTP) Transcribe speech-to-text job.
aws_translate connector://aws-translate/send IAM SigV4 No (HTTP) Translate TranslateText / TranslateDocument.
aws_waf connector://aws-waf/send IAM SigV4 No (HTTP) WAF web ACLs and rule groups.
aws_bedrock connector://aws-bedrock/send IAM credential chain Yes (aws-sdk-go-v2/service/bedrockruntime) Bedrock InvokeModel — Claude, Titan, Llama, Mistral, etc.
signing (internal helper) n/a n/a Shared AWS SigV4 request-signer used by HTTP connectors.

signing.go is a helper, not a registered connector. The other 46 register via init().

Native-SDK deep section

aws_s3

Source: pkg/connector/connectors/aws/s3.go. Uses aws-sdk-go-v2/service/s3 with the v2 credential chain. Supports binary multipart uploads, range GETs, and presigned URLs.

connectors:
  s3:
    type: aws_s3
    config:
      region: us-east-1
      bucket: my-bucket
      # Optional explicit credentials; otherwise IAM role / env / shared file
      access_key_id: ${AWS_ACCESS_KEY_ID}
      secret_access_key: ${AWS_SECRET_ACCESS_KEY}

Send a PutObject by setting headers operation=put, key=path/to/object; the exchange body becomes the object body.

aws_sqs

Source: pkg/connector/connectors/aws/sqs.go. Outbound SendMessage and inbound long-polling ReceiveMessage (with DeleteMessage after handler returns).

connectors:
  events-out:
    type: aws_sqs
    config:
      region: us-east-1
      queue_url: https://sqs.us-east-1.amazonaws.com/123456789012/events

aws_dynamodb, aws_lambda, aws_kinesis, aws_sns, aws_eventbridge, aws_ec2, aws_rds, aws_secrets_manager

Same pattern: typed v2 service clients, set the operation via exchange header, body is the operation request payload (JSON or struct). See the Connector SDK guide for a full walk-through.

See also

  • Connector SDK guide — adding native-SDK connectors
  • pkg/component/s3/ — the first-class S3 component for high-volume pipelines
  • IAM credential chain: standard aws-sdk-go-v2 resolution order (env vars → shared file → IMDS → ECS task role)