Skip to content
Custom Connectors

Full read-write Claude connector for Amazon S3

Make Claude upload, organize, and manage objects in Amazon S3

Stop dropping into the console or CLI to move files around. Claude uploads objects to the right bucket and prefix, copies and tags them in place, and deletes only once you approve, all scoped to the buckets your IAM credentials already allow.

Amazon S3 is AWS's object storage service, where teams keep files, backups, logs, and data lake objects in buckets. People want Claude to do more than list a bucket: to upload objects, organize prefixes, and manage what lives there.

What is an Amazon S3 MCP server?

A Amazon S3 MCP server is a small hosted service that exposes Amazon S3's data and actions to Claude over the Model Context Protocol, so Claude can files and folders inside your own account. We build it as a custom connector with separate read and write tools, and destructive actions stay gated behind your approval.

What can Amazon S3's current connector do today?

Today, AWS publishes an official MCP server that Claude can connect to, but it exposes a small, general tool set spanning the whole AWS API rather than focused S3 actions. A custom S3 connector adds purpose-built, scoped write tools, putting and copying objects, managing prefixes and tags, with separated read and write tools and gated deletes.

What does full read-write Amazon S3 access unlock?

Full read-write S3 access lets Claude upload an object to a specific bucket and prefix, copy or move objects between locations, set object tags and metadata, generate presigned URLs, and delete objects once you approve. The bucket housekeeping that used to mean the console or CLI happens through the assistant.

  • Upload an object to a specific bucket and key prefix
  • Copy or move objects between buckets or prefixes
  • Set or update object tags and metadata for lifecycle and cost tracking
  • Generate a presigned URL for a single object after you approve it
  • Delete an object or a scoped set of objects once you confirm
  • List a prefix and propose a batched reorganization for review

Can Claude upload objects to a specific Amazon S3 bucket?

Uploading objects to a specific Amazon S3 bucket is the core write action. A custom connector exposes a put-object tool scoped to the buckets and key prefixes you allow, so Claude can place a file at an exact key. AWS ships an official MCP server with broad, general tools, so focused S3 uploads still benefit from purpose-built scoped IAM credentials.

Can Claude copy and tag objects across prefixes in Amazon S3?

Copying and tagging objects across prefixes in Amazon S3 happens through the connector's write tools. Claude can copy or move objects between buckets or prefixes, set or update object tags and metadata for lifecycle and cost tracking, and propose a batched reorganization of a prefix for you to review.

Will Claude delete objects from my Amazon S3 bucket?

Deleting objects from your Amazon S3 bucket is a separate, gated action. Claude can list objects and propose what to remove, but nothing is deleted until you confirm it. The IAM policy can deny delete entirely if you prefer, and the connector never gets more access than the credentials already have.

How an Amazon S3 connector works

We build a small MCP server that authenticates to S3 with a scoped IAM role or access key limited to the buckets and prefixes the work needs. Read tools (list, get object) and write tools (put, copy, tag, delete) are separated, and destructive actions like delete require your confirmation. Claude only ever has the access the underlying IAM credentials already have, and we can pair this with bucket policies or VPC and IP allowlisting where your account supports it.

Frequently asked questions

Can Claude upload files to an S3 bucket, not just read them?
Yes. A custom S3 connector exposes a put-object write tool scoped to the buckets and prefixes you allow, so Claude can upload a file to a specific key. AWS does publish an official MCP server, but it offers broad, general AWS tools, so focused S3 write access still benefits from a purpose-built connector backed by scoped IAM credentials.
Will Claude delete objects from my bucket without my approval?
No. Delete is a separate, gated write action. Claude can list objects and propose what to remove, but nothing is deleted until you approve it. You decide which actions run automatically and which require a confirmation step, and the IAM policy can deny delete entirely if you prefer.
Does the connector get more access than my IAM credentials allow?
No. The connector authenticates with a scoped IAM role or access key and inherits exactly those permissions. It never grants Claude more access than the credentials already have, so you can limit it to specific buckets, prefixes, and actions, and layer on bucket policies or IP allowlisting as needed.

Tell us what you run. We'll build the connector.

Pick your tool, choose what Claude should do, and get an instant scope and price. No call required.