AWS S3

Provision a new S3 bucket in the specified region so your pipeline has an isolated namespace for assets, logs, or uploads the moment it needs one.

Remove an empty S3 bucket from your account permanently, keeping your bucket inventory clean and preventing stale namespaces from accumulating costs.

Retrieve the full list of S3 buckets in your AWS account so the agent can audit storage topology, route assets to the right container, or report on sprawl.

Query objects inside a specific S3 bucket by prefix, suffix, or metadata pattern so the agent can locate exactly the files it needs without downloading the entire contents.

Duplicate an S3 object to a new key or bucket server-side, enabling zero-egress promotions, backups, and cross-bucket migrations without pulling data through the agent.

Permanently remove a specific object from an S3 bucket, enforcing retention policies, honouring deletion requests, and keeping storage costs proportional to what you actually need.

Fetch the binary or text content of an S3 object to the agent's local context so it can read, transform, forward, or attach the file to another workflow step.

List every object in an S3 bucket or prefix so the agent has a complete, current manifest to drive bulk operations, audits, or downstream processing queues.

Push a local file or in-memory payload to a specific S3 key, making the content durable and accessible to every downstream system that reads from that bucket.

Write a zero-byte prefix placeholder in S3 to establish a logical folder structure before any real objects arrive, keeping your bucket organised from the first upload.

Remove a key prefix and all objects nested beneath it from an S3 bucket, wiping an entire logical directory in one coordinated operation rather than deleting files one by one.

Enumerate the top-level or nested key prefixes inside an S3 bucket so the agent understands the directory structure before routing files, auditing layout, or building a dynamic menu of storage locations.

Create a time-limited, cryptographically signed URL for an S3 object that grants temporary access without exposing credentials or making the object public.

Retrieve an S3 object's size, content type, last-modified timestamp, and custom metadata tags without downloading the file contents.

Apply or update key-value tags on an S3 object to drive lifecycle policies, cost allocation, access controls, or downstream routing without touching the object itself.

Fires when a new object lands in a bucket or prefix; can be scoped to a specific prefix or file extension.

Fires when an object is permanently removed from a bucket; can be filtered by prefix to watch specific directories.

Fires when an object is duplicated to a new key or bucket; useful for tracking replication, promotion workflows, or cross-region copies.

Fires when an uploaded object exceeds a configured size threshold; threshold is tunable per bucket or prefix.

Fires when a new S3 bucket is provisioned in the account; useful for enforcing security baselines the moment infrastructure appears.

Fires when a bucket is removed from the account; triggers immediate audit and dependent-service checks.

Fires when a new key prefix appears in a bucket, indicating a new logical directory has been established.

Fires on a schedule to scan a bucket or prefix and surface files added, modified, or missing since the previous run.