N8N Tools - S3 Enhanced icon

N8N Tools - S3 Enhanced

Enhanced S3 operations with presigned URLs, multipart upload, and advanced features
Join our community

Actions66

Overview

This node provides enhanced operations for interacting with S3-compatible object storage services. It supports a wide range of bucket and object management features, including generating presigned URLs for secure temporary access, uploading and downloading objects, managing bucket policies, tags, lifecycle rules, multipart uploads, and more.

The Generate Presigned URL operation specifically creates a temporary URL that allows users to perform actions on an object (such as download, upload, or fetch metadata) without requiring direct credentials. This is useful in scenarios where you want to securely share access to private objects for a limited time, such as:

  • Allowing users to download files directly from your storage without exposing credentials.
  • Enabling clients to upload files securely via a URL.
  • Fetching object metadata temporarily without full access permissions.

Example use case: You have a private file stored in an S3 bucket and want to provide a user with a link to download it that expires after one hour. This node can generate that presigned URL easily.

Properties

Name Meaning
Bucket Name Name of the S3 bucket where the object resides.
Object Key Complete path/key of the object within the bucket (e.g., folder/file.pdf).
HTTP Method The HTTP method for the presigned URL:
- GET (Download) — URL for downloading the object.
- PUT (Upload) — URL for uploading to the object.
- HEAD (Metadata) — URL for fetching object metadata.
Expires In (seconds) Duration in seconds for which the presigned URL remains valid. Maximum allowed is 604800 (7 days).

Output

The output JSON object for the Generate Presigned URL operation includes:

  • bucket: The bucket name used.
  • key: The object key/path.
  • method: The HTTP method associated with the presigned URL (GET, PUT, or HEAD).
  • presignedUrl: The generated presigned URL string that can be used to perform the specified action.
  • expiresIn: The expiration duration in seconds as requested.
  • expiresAt: ISO timestamp indicating when the URL will expire.

This output enables downstream nodes or workflows to use the URL directly for accessing or modifying the object securely.

Dependencies

  • Requires an S3-compatible service endpoint with appropriate access credentials (access key ID and secret access key).
  • Uses AWS SDK v3 libraries internally for S3 client and presigning requests.
  • Node credentials must include valid API authentication tokens for the target S3-compatible service.
  • No additional environment variables are required beyond standard credential configuration.

Troubleshooting

  • Invalid Credentials: Errors like "Invalid Access Key ID" or "Invalid Secret Access Key" indicate incorrect or expired credentials. Verify and update your API keys.
  • Access Denied: If permission errors occur, ensure the credentials have sufficient rights for the requested operation on the bucket/object.
  • Endpoint Connection Issues: Errors such as "Cannot connect to endpoint" suggest network or endpoint misconfiguration. Check the endpoint URL and network connectivity.
  • Unsupported HTTP Method: Using an unsupported method for presigned URL generation will throw an error. Only GET, PUT, and HEAD are supported.
  • Expiration Time Limits: Setting expiration longer than 7 days (604800 seconds) will automatically limit to 7 days.
  • Malformed Object Key: Ensure the object key is correctly formatted and exists in the bucket if applicable.

Links and References

If you need details about other operations or further explanation, feel free to ask!

Discussion