Prerequisite: Third-party connectors are available only on the Sana Enterprise tier, with one exception: the Workday connector is included for both Sana Core and Sana Enterprise.
Introduction
Connect AWS to Sana to query DynamoDB tables, Redshift databases, S3 files, invoke Lambda functions, and send messages through SQS, SNS, and EventBridge.
In summary, the connector has the following key characteristics:
Category: Engineering
Connector type: Real-time
Auth type: API keys
Hosting type: Managed
Capabilities
This connector is able to do the following:
Capability |
Query DynamoDB |
Read S3 files |
Invoke Lambda functions |
Query Redshift |
Send SQS messages |
Send SNS messages |
Send EventBridge events |
Write CloudWatch logs |
Tools
While the capabilities above describe what the connector can do at a high level, the underlying tools show exactly which operations the agent can use when you ask Sana about AWS. In practice, the agent may call one or more tools to achieve a single capability.
Tool |
Cloudwatch logs put log event |
Dynamodb create table |
Dynamodb execute statement |
Dynamodb query |
Dynamodb scan |
Eventbridge send event |
Lambda create function |
Lambda invoke function |
List region options |
Redshift create rows |
Redshift delete rows |
Redshift query database |
Redshift update rows |
S3 download file to tmp |
S3 generate presigned url |
Sns send message |
Sqs send message |
Note: This article lists the connector's full set of tools. Your workspace owner can disable individual tools for your workspace, so some of those listed here may not be available to your agents. If a tool you expected is missing, reach out to your workspace owner.
Triggers
While tools are the actions an agent takes on your behalf, triggers are the events that can start an agent automatically. When you build an agent, you can choose one of the triggers below as its starting point. For example, having the agent run every time something new happens in AWS.
Trigger |
New Deleted S3 File |
New DynamoDB Stream Event |
New Inbound SES Emails |
New Records Returned by CloudWatch Logs Insights Query |
New Restored S3 File |
New S3 Event |
New S3 File |
New Scheduled Tasks |
New SNS Messages |
New Update to AWS RDS Database (Instant) |
Redshift - New Row |
Redshift - Updated Row |
Scope and permissions
This connector uses API keys. When you connect your account, we securely store your keys to connect to this connector's APIs. The scopes for this connector depends on the scopes you assign your API key in AWS when generating the key.
Set up instructions
Prerequisites:
You are a Sana Enterprise user – all third-party connectors except the Workday connector are available only for users on the Sana Enterprise tier.
Your Sana workspace owner has enabled this connector – if the workspace owner has disabled the connector it won't appear in the list of available connectors.
Step 1: Go to the connectors page in Sana
In Sana, click on your profile icon and name in the bottom left corner and select Connectors.
Step 2: Find AWS in the list of available connectors
Scroll to the Available connectors section and locate AWS.
Note: If you can't find a connector in this list, it means one of the following:
You've already connected it — check the ”Active connectors” section at the top of the connectors page, or
Your workspace owner has disabled this connector for your workspace — reach out to them for more information or to request that it be enabled.
Step 3: Hover the connector card and click the connect button
Hover the AWS card and click the Connect button.
Tip: If you click the card itself instead of the Connect button, you'll open a connector detail page with more information about its capabilities.
Step 4: Initialize the Pipedream connection
When clicking Connect in the previous step, a pop-up will appear powered by Pipedream. Click the Continue button in the pop-up to initialize the set up.
Note: Sana uses Pipedream to connect your account. Pipedream is a Workday product, trusted by millions of people to keep their data secure.
Step 5: Provide your AWS credentials
You'll be asked to paste the credentials for AWS so Sana can store them securely and use them to call the connector's APIs on your behalf.
Step 6: Complete the set up
You've successfully connected your AWS account. Click Continue to complete the setup and start using the connector.
Known limitations
S3 search: File search is limited — the connector can only list files in a bucket, not run a filtered search.
S3 file formats: Sana can only read the following file formats stored in S3:
doc,docx,dot,dotx,dotm,xls,xlsm,xlsx,pps,ppsx,ppt,pptx,odp,ods,odt,rtf,eml,msg,htm,html,markdown,md,epub,tif,tiff,pdf,jpeg,jpg,png,gif,webp,loop,fluid,fluidframework,whiteboard,wbtx,form,note,task,page,pulse,loot,dwg,dsn.



