Get Started

OverviewCreate a sourceCreate a modelCreate a destinationCreate a sync


AWSdbt Clouddbt ModelsGit SyncAirflowHTTP APIPagerDuty

Amazon Web Services

Table of Contents
Grant Hightouch access to resources within your AWS account.Hightouch's AWS integration currently powers two features: External Storage via S3 and the Athena source.


To start the process of connecting your AWS account to Hightouch, navigate to your Integration Settings. Under Cloud Providers, click Add Cloud Provider. Give your Credential a name, then select the Amazon Web Services provider.Under Access Type, you can choose whether to select Cross-Account Role or Access Key.

Cross-Account Role

Cross-Account Roles are a mechanism provided by AWS to allow you to grant secure access to Hightouch without requiring that you hand over sensitive secrets like Secret Access Keys.Hightouch will provide you with an Account ID and a randomly generated External ID, as shown below, which must be plugged into an IAM Role you create in your AWS account. Store these values for future reference.
Neither the Account ID nor the External ID are secrets, so don't worry about keeping them somewhere secure.
  1. From your AWS console, navigate to IAM > Roles and click Create Role.
  2. Under Select type of trusted entity, choose Another AWS account.
  3. Proceed to attach permissions to the role, choose a name, then create the role.
    • The exact permission policies you attach depend on which Hightouch features you intend to use. Consult the documentation for those services for further guidance.
  4. Copy the Role ARN from AWS IAM and paste it into the Role ARN field in Hightouch. Click Create to complete the process.
For more information, read AWS's tutorial on delegating access cross-account using IAM Roles.

Access Key

The Access Key access type allows you to configure Hightouch to use an IAM user by providing the user's Access Key ID and Secret Access Key.If you need help generating these keys, consult the IAM article on this topic.Once you have an Access Key ID and Secret Access Key, all you need to do is paste those values into the Hightouch form and click Create.