AwsS3Data(mapping=None, *, ignore_unknown_fields=False, **kwargs)An AwsS3Data resource can be a data source, but not a data sink. In an AwsS3Data resource, an object's name is the S3 object's key name.
.. _oneof: https://proto-plus-python.readthedocs.io/en/stable/fields.html#oneofs-mutually-exclusive-fields
Attributes |
|
|---|---|
| Name | Description |
bucket_name |
str
Required. S3 Bucket name (see `Creating a bucket |
aws_access_key |
google.cloud.storage_transfer_v1.types.AwsAccessKey
Input only. AWS access key used to sign the API requests to the AWS S3 bucket. Permissions on the bucket must be granted to the access ID of the AWS access key. For information on our data retention policy for user credentials, see `User credentials `__. |
path |
str
Root path to transfer objects. Must be an empty string or full path name that ends with a '/'. This field is treated as an object prefix. As such, it should generally not begin with a '/'. |
role_arn |
str
The Amazon Resource Name (ARN) of the role to support temporary credentials via AssumeRoleWithWebIdentity. For
more information about ARNs, see `IAM
ARNs |
cloudfront_domain |
str
Optional. The CloudFront distribution domain name pointing to this bucket, to use when fetching. See `Transfer from S3 via CloudFront |
credentials_secret |
str
Optional. The Resource name of a secret in Secret Manager. AWS credentials must be stored in Secret Manager in JSON format: { "access_key_id": "ACCESS_KEY_ID", "secret_access_key": "SECRET_ACCESS_KEY" } GoogleServiceAccount][google.storagetransfer.v1.GoogleServiceAccount]
must be granted roles/secretmanager.secretAccessor for
the resource.
See [Configure access to a source: Amazon S3]
(https://cloud.google.com/storage-transfer/docs/source-amazon-s3#secret_manager)
for more information.
If credentials_secret is specified, do not specify
role_arn][google.storagetransfer.v1.AwsS3Data.role_arn] or
aws_access_key][google.storagetransfer.v1.AwsS3Data.aws_access_key].
Format: projects/{project_number}/secrets/{secret_name}
|
managed_private_network |
bool
Egress bytes over a Google-managed private network. This network is shared between other users of Storage Transfer Service. This field is a member of oneof_ private_network.
|