# Amazon S3

Integrate, catalog, and govern Amazon S3 assets in Atlan.

## Setup options

- [Set up Amazon S3](https://docs.atlan.com/llms/connectors/amazon-s3/set-up-s3/llms.txt): Create AWS IAM permissions and credentials for Atlan to access and catalog your S3 buckets and objects.
- [Choose how Atlan connects to Amazon S3](https://docs.atlan.com/llms/connectors/amazon-s3/choose-how-atlan-connects-to-amazon-s3/llms.txt): Pick the identity Atlan uses to read your Amazon S3 metadata - a cross-account IAM role it borrows, or an IAM user whose keys you hand over.
- [Set up S3 access with cross-account IAM role](https://docs.atlan.com/llms/connectors/amazon-s3/set-up-s3-access-with-a-cross-account-iam-role/llms.txt): The production-recommended way to connect Atlan to Amazon S3 - Atlan temporarily assumes a role in your AWS account, with no secret created or exchanged.
- [Set up S3 access with IAM access keys](https://docs.atlan.com/llms/connectors/amazon-s3/set-up-s3-access-with-iam-access-keys/llms.txt): The fully self-serve way to connect Atlan to Amazon S3 - create an IAM user, attach the permission policy, and paste its keys into Atlan.
- [Bucket policies, KMS keys, and prefix scoping](https://docs.atlan.com/llms/connectors/amazon-s3/bucket-policies-kms-keys-and-prefix-scoping/llms.txt): The Amazon S3 second doors - bucket policies, KMS key policies, and how to scope Atlan's access down to a single prefix.
- [Special cases](https://docs.atlan.com/llms/connectors/amazon-s3/special-cases/llms.txt): Amazon S3 special cases - multi-million-object buckets, multiple AWS accounts, Atlan-hosted bucket flows, External ID limitations, and the region field.

## Crawl and mine

- [Crawl S3 assets](https://docs.atlan.com/llms/connectors/amazon-s3/crawl-s3/llms.txt): Configure and run the S3 crawler to catalog your Amazon S3 buckets and objects in Atlan.

## Reference

- [How cross-account access works](https://docs.atlan.com/llms/connectors/amazon-s3/how-cross-account-access-works/llms.txt): Learn how Atlan reads Amazon S3 - IAM roles, trust policies, External IDs, and the four AWS doors every crawl must pass through.
- [Set up Inventory reports](https://docs.atlan.com/llms/connectors/amazon-s3/set-up-inventory-reports-for-s3/llms.txt): Create Inventory report for Amazon S3 in case of inventory based ingestion through the crawler.
- [Atlan identity details](https://docs.atlan.com/llms/connectors/amazon-s3/atlan-identity-details/llms.txt): The Atlan-side values an Amazon S3 role setup needs, what each is for, and how to get them in a single support ticket.
- [S3 Inventory Report Structure](https://docs.atlan.com/llms/connectors/amazon-s3/inventory-report-structure/llms.txt): Expected folder structure and format for S3 inventory reports used by Atlan's S3 crawler for inventory-based ingestion.
- [What does Atlan crawl from Amazon S3](https://docs.atlan.com/llms/connectors/amazon-s3/what-does-atlan-crawl-from-s3/llms.txt): Complete reference for the S3 assets and properties that Atlan crawls and maps during S3 cataloging.
- [Manage AWS S3 assets](https://docs.atlan.com/llms/connectors/amazon-s3/manage-assets/llms.txt): Manage Amazon S3 assets programmatically in Atlan using the Python SDK (pyatlan). Create, update, and delete S3 connections, buckets, and objects via the SDK.

## Troubleshooting

- [Troubleshooting S3 connectivity](https://docs.atlan.com/llms/connectors/amazon-s3/troubleshooting-s3-connectivity/llms.txt): Symptom-first troubleshooting for Amazon S3 connectivity - ListAllMyBuckets 403s, the empty-AKID trap, AssumeRole denials, explicit denies, KMS, region mismatches, and inventory issues.