The AWS S3 connection type in the Manage Connections window lets you register AWS S3 buckets that can be used by meters in Zuora Mediation.

S3 connections allow meters to read from and write to AWS S3 buckets, using cross-account IAM role assumption so that no long-lived access keys are stored in Zuora.

You can either use a Zuora-managed S3 bucket, which requires no configuration on your side, or connect your own AWS S3 bucket for full control over data residency and compliance.

The following rules apply when you create or activate S3 connections:

• Required fields: Connection Name, AWS Account ID, Bucket Name, and Region must be provided; missing required fields result in validation errors in the form.

• The AWS Account ID must contain exactly 12 numeric digits.

• The Base Path must not start with / and must not contain ..

• Connection names must be unique; creating an S3 connection with a duplicate name returns an error.

• A Zuora-managed S3 connection can only be created once. After one is created, the Zuora-managed S3 option is disabled.

• If validation fails during activation, an error message is displayed and the connection is not activated until validation succeeds.

For Zuora-managed S3 connections, Zuora uses its own infrastructure bucket and automatically sets the connection to ACTIVE upon creation. Zuora-managed S3 connections cannot be updated or deleted, and data is stored under a Zuora-managed path of the form <zuora-bucket>/<environment>/mediation-tenant-data/<tenantId>/.