#  AWS S3

Connect your S3 buckets to give Herald’s SRE agent access to stored files. During investigations, the agent can browse bucket contents and retrieve files — including extracting contents from zip archives.

**The agent can:**

- List files in an S3 bucket or path prefix
- Download individual files by S3 URL
- Download and filter multiple files by name pattern

| Parameter                    | Description                                                                                                                                                            |
|------------------------------|------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| **AWS Access Key ID**       | The access key ID for an IAM user with read access to the relevant S3 buckets.                                                                                       |
| **AWS Secret Access Key**    | The secret access key associated with the access key ID above.                                                                                                       |
| **Region**                   | The AWS region of your S3 bucket. Select **Auto-detect** to let Herald determine the region automatically — recommended for single-region setups.                     |

**Optional parameters**

| Parameter                    | Description                                                                                                                                                            |
|------------------------------|------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| **Rules / Instructions**      | Free-form instructions that guide the agent on how to use this integration (e.g., "Only access the logs/ prefix in the production-artifacts bucket").                 |