# Set Up Amazon S3 Connection

After you create your Data 360 instance, you can set up an Amazon S3 connection.

| User Permissions Needed |                                                             |
| ----------------------- | ----------------------------------------------------------- |
| To create a connection: | System Admin profile or Data Cloud Architect permission set |

Complete the prerequisite.

- Add the IP addresses from [IP addresses](https://help.salesforce.com/s/articleView?id=data.c360\_a_data_cloud_ip_address_allowlist.htm\&type=5) to your allowlist to make sure the Amazon S3 Source Connection has necessary access.

1. In Data Cloud, go to Data Cloud Setup.

2. Under External Integrations, select **More Connectors**.

3. Click **New**.

4. Under Source, select **Amazon S3** and click **Next**.

5. Enter a connection name, connection API name.

6. Enter the authentication details.

   If you choose to use Access Key and Secret, click **Access Key/Secret Based**.

   | Field Label    | Description                                  |
   | -------------- | -------------------------------------------- |
   | AWS Access Key | Programmatic username for API access to AWS. |
   | AWS Secret Key | Programmatic password for API access to AWS. |

   If you choose to use IdP, **click Identity Provider Based**. Refer to [Use Identity Provider–Based Authentication for S3 Connectors](/docs/data/data-cloud-int/guide/c360-a-awss3-connector-idp-settings.md) for more details and enter the values.

   | Field Label   | Description                                                                                                                  |
   | ------------- | ---------------------------------------------------------------------------------------------------------------------------- |
   | IAM Role Name | The Amazon Resource Name (ARN) specifying the role.                                                                          |
   | External ID   | It’s auto-generated connection ID. Enter the External ID in the AWS trust policy for the role before testing the connection. |

7. Enter the connection details.

   | Field Label      | Description                                      |
   | ---------------- | ------------------------------------------------ |
   | Bucket Name      | Specific public cloud storage resource in AWS.   |
   | Parent Directory | Parent folder that corresponds to the S3 bucket. |

8. To review your configuration, click **Test Connection**.

9. Click **Save**.

You can create data streams for any objects under the parent directory.

## Next Step

- [Create an Amazon S3 Data Stream in Data 360](/docs/data/data-cloud-int/guide/c360-a-create-awss3-data-stream.md)