Connecting to S3 Bucket using Access Point Alias in Infinity 23

Hello,

Currently, Pega Repository rule for AWS S3 require an Authentication profile containing the Access Key ID and Secret Access Key to connect to an AWS S3 bucket. Our application is deployed on AWS (Infinity 23). To eliminate the need for key rotation and improve security, we’re exploring the possibility of using Access Point Aliases from within Pega.

Is there a supported way for the Pega application to establish a connection to an S3 bucket using only the Access Point Alias, without requiring the Authentication profile (Access Key ID and Secret Access Key)?

Thank you!

We have reached out to Pega support and they have confirmed that Pega S3 OOTB functionality currently only supports Service Accounts. However, Access Point support to connect S3 is in their backlog and they suggested a custom repository rule as the best alternative for now.

Custom Repository Connection: