Bryan Meyerovich
10/26/2025, 3:22 PMkapa.ai
10/26/2025, 3:23 PMs3:PutObject, s3:GetObject, s3:DeleteObject, s3:ListBucket, etc., on your target bucket. Example policy: json { "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": [ "s3:PutObject", "s3:GetObject", "s3:DeleteObject", "s3:PutObjectAcl", "s3:ListBucket", "s3:ListBucketMultipartUploads", "s3:AbortMultipartUpload", "s3:GetBucketLocation" ], "Resource": [ "arn:aws:s3:::YOUR_BUCKET_NAME/*", "arn:aws:s3:::YOUR_BUCKET_NAME" ] } ] } [S3 destination setup](https://docs.airbyte.com/integrations/destinations/s3) 2. In the Airbyte S3 destination connector configuration: - Leave Access Key ID, Secret Access Key, and Role ARN blank. - Fill in the required fields: S3 Bucket Name, S3 Bucket Path, and S3 Bucket Region. 3. Verify connectivity: Make sure your EC2 instance can access the S3 bucket (networking, VPC, and security group settings). 4. Test the connection using the "Check connection" tool in the Airbyte UI. If you see the error "No identity could be resolved from the chain," it usually means: - The EC2 instance does not have an instance profile attached, or - The instance profile does not have the correct permissions, or - The Airbyte connector is not running with the correct environment to pick up the instance profile. Note: The documentation confirms that if you omit the credentials, Airbyte will rely on the instance profile for authentication ([source](https://docs.airbyte.com/integrations/destinations/s3#step-2-set-up-the-s3-destination-connector-in-airbyte)). If you have confirmed the above and still encounter issues, double-check that your Airbyte deployment is not overriding AWS credential environment variables and that the IAM role is properly attached to the EC2 instance. If you need more details on the required IAM policy, see the example in the documentation: [S3 destination setup](https://docs.airbyte.com/integrations/destinations/s3#step-2-set-up-the-s3-destination-connector-in-airbyte).Bryan Meyerovich
10/26/2025, 3:25 PMkapa.ai
10/26/2025, 3:25 PMkapa.ai
10/26/2025, 3:25 PMaws s3 ls <s3://YOUR_BUCKET_NAME> as the same user that runs Airbyte. If this works, the instance profile is set up correctly at the OS level. 4. Check environment variables in the Airbyte connector pods or containers: - If you are running Airbyte with Docker Compose or Kubernetes, ensure that no environment variables like AWS_ACCESS_KEY_ID or AWS_SECRET_ACCESS_KEY are set to empty or invalid values, as these can override the instance profile credentials ([forum discussion](https://discuss.airbyte.io/t/1558)). - You can inspect the environment variables by running printenv inside the Airbyte server/container ([forum discussion](https://discuss.airbyte.io/t/1669)). If the AWS CLI works but Airbyte still fails with "No identity could be resolved from the chain," it suggests that the Airbyte process is not able to access the instance profile credentials, possibly due to overridden or missing environment variables. The knowledge sources do not provide a more detailed troubleshooting checklist for this specific scenario, but these steps are directly referenced or implied in the documentation and forum discussions.