---
title: "AWS Access Key Integration"
slug: "aws-access-key-integration"
updated: 2026-10-15T17:38:49Z
published: 2026-10-15T17:38:49Z
canonical: "docs.dataloop.ai/aws-access-key-integration"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.dataloop.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Access Key Integration

## Overview

AWS Access Key Integration allows the DDOE platform to securely connect with AWS services using access keys. This integration enables seamless interaction with AWS resources, allowing for automated data transfers, processing, and management tasks.

Warning: Security Level - Low

We recommend selecting **Cross-Account** as the integration type. It is AWS’s most secure option and provides enhanced protection for your data.

Who can create?

Only users with the Organization **Admin** or **Owner** roles are authorized to create integrations. [Learn more](https://docs.dataloop.ai/docs/org-members-groups#org-role-permissions)

The AWS access key integration process involves:

## 1. Create an S3 Bucket

1. Log in to the [AWS Management Console](https://aws.amazon.com/console/).
2. Go to Services > Storage and click the **S3** service.
3. Click **Create bucket**. The Create Bucket page is displayed.
4. Provide a Bucket name.
5. Select your AWS region from the list.
6. Ensure you block public access settings for this bucket - **Block all public access**.
7. For all other optional settings, use the default values.
8. Click **Create bucket**. A confirmation message is displayed.

For a step-by-step guide on creating an S3 bucket in AWS, see [Creating a bucket](https://docs.aws.amazon.com/AmazonS3/latest/userguide/create-bucket-overview.html).

---

## 2. Create an IAM Policy

1. Log in to the [AWS Management Console](https://aws.amazon.com/console/).
2. Go to **Services** and click **All services**. A list of services is displayed.
3. Select the **IAM** service from the list.
4. Click on **Policies** from the left navigation panel.
5. Click **Create policy**. The Create Policy page is displayed.
6. Select the **JSON** tab and define the policy document in the following JSON format:

```
{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "AllowListBucket",
            "Effect": "Allow",
            "Action": [
                "s3:ListBucket",
                "s3:PutObject",
                "s3:DeleteObject",
                "s3:GetObject"
            ],
            "Resource": [
                "arn:aws:s3:::<DataloopBucketName>",
                "arn:aws:s3:::<DataloopBucketName>/*"
            ]

        }
    ]
}
```

          Note:

          

Replace `&lt;DataloopBucketName&gt;` with the name of the your S3 bucket.

1. Click **Next**.
2. Enter a **Name** for the policy and an optional **Description**.
3. Click **Create policy**. A confirmation message is displayed.

          Note:

          

- `s3:DeleteObject` action allows Dataloop platform to delete dataset items,  see [downstream](https://dataloop.ai/docs/storage?highlight=external%20sto#downstream).
- The resource `arn:aws:s3:::&lt;DataloopBucketName&gt;` is required for the `ListBucket` action.

For a step-by-step guide on creating an IAM policy in AWS, see [Creating IAM policies](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_create.html).

---

## 3. Create an IAM User

1. Log in to the [AWS Management Console](https://aws.amazon.com/console/).
2. Go to **Services** and click **All services**. A list of services is displayed.
3. Click the **IAM** service from the list.
4. From the left portal menu, click **Users**.
5. Click **Add users**.
6. Enter a **username**.
7. Ensure the **Programmatic access** checkbox is selected as the type of access you want to grant the user.
8. Click **Next**. A Set Permissions page is displayed.
9. Choose the **Attach policies directly**.
10. Select the permission policy that you created for accessing your S3 bucket from the list.
11. Click **next**.
12. Click **Create user**. A confirmation message is displayed. See [Creating an IAM user in AWS](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_users_create.html) for more information.

---

## 4. Create an Access Key for the IAM User

1. Log in to the [AWS Management Console](https://aws.amazon.com/console/).
2. Go to **Services** and click **All services**. A list of services is displayed.
3. Click the **IAM** service from the list.
4. From the left portal menu, click **Users**.
5. Find and click on the desired user (for example, a Dataloop user) for whom you want to create an access key.
6. Click on the **Security credentials** tab.
7. In the **Access keys** section, click **Create access key**.
8. In the **Access key best practices & alternatives**, choose **Application running outside AWS**.
9. Click **Next**.
10. Enter a description that includes Dataloop.
11. Click **Create access key**.
12. Copy and save the **Access Key** and **Secret Access Key** in a secure location, or download the CSV file. The access key and secret access key are required for the integration phase.
13. Click **Done**. It completes the access key creation process for the IAM user.

---

## 5. Create the AWS Access Key Integration

Who can create?

Only users with the Organization **Admin** or **Owner** roles are authorized to create integrations. [Learn more](https://docs.dataloop.ai/docs/org-members-groups#org-role-permissions)

1. Log in to the DDOE platform.
2. From the left-side panel, select **Integrations**.
3. Click **Create Integration** -> **Create Storage Integration**. A pop-up window is displayed.
4. **Integration Name**: Enter a **Name** for the integration.
5. **Provider**: Choose **AWS** from the list.
6. **Integration Type**: Select the **Access Key** from the list.
7. **Key**: Enter the IAM user’s access key ID that you noted while creating an access key for the IAM user.
8. **Secret**: Enter the IAM user’s secret access key that you noted while creating an access key for the IAM user.
9. Click **Create Integration**. A confirmation message is displayed.