--- title: Connect Amazon S3 data to Databricks with Delegated IAM... description: Databricks has made connecting Amazon S3 buckets significantly easier with a new Automatic Setup flow now generally available. Previously requiring 140-line... canonical: https://daily.dev/posts/connect-amazon-s3-data-to-databricks-with-delegated-iam-permissions-wjxjv02uq twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Connect Amazon S3 data to Databricks with Delegated IAM Permissions | daily.dev og:description: Databricks has made connecting Amazon S3 buckets significantly easier with a new Automatic Setup flow now generally available. Previously requiring 140-line... og:url: https://daily.dev/posts/connect-amazon-s3-data-to-databricks-with-delegated-iam-permissions-wjxjv02uq og:image: https://api.daily.dev/og/posts/WjxjV02uq.png og:image:alt: Connect Amazon S3 data to Databricks with Delegated IAM Permissions og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Connect Amazon S3 data to Databricks with Delegated IAM Permissions **[databricks](https://daily.dev/sources/databricks)** · 4 min read · 0 upvotes · 0 comments ## Summary Databricks has made connecting Amazon S3 buckets significantly easier with a new Automatic Setup flow now generally available. Previously requiring 140-line IAM trust policies, CloudFormation templates, and manual configuration across multiple consoles, the process now takes a few clicks directly from Catalog Explorer. Powered by AWS IAM temporary delegation, users log into AWS to verify permissions, then grant Databricks a temporary authorization to provision all required resources automatically. The feature handles IAM role creation following least-privilege principles, eliminates common failure modes like misconfigured ARNs and missing bucket permissions, and supports the LTAP architecture by removing infrastructure barriers to governed S3 connectivity. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### How do I connect an Amazon S3 bucket to Databricks without manually writing IAM trust policies? Databricks now offers Automatic Setup for Amazon S3, generally available, which uses AWS IAM temporary delegation to provision the connection for you. In Catalog Explorer, go to External Locations, choose Create, specify the bucket and access level, then log into AWS to grant Databricks temporary, time-bounded authorization. Databricks then automatically creates the IAM role, trust policy, and bucket permissions instead of requiring manual authoring of a 140-line IAM trust policy and CloudFormation templates. _daily.dev surfaces updates like this for engineers wiring cloud storage into governed data platforms._ ### What is AWS IAM temporary delegation used for in Databricks external location setup? It lets an AWS user with sufficient permissions grant Databricks a time-bounded authorization to provision the IAM roles and S3 bucket permissions needed for an external location, without the user manually configuring trust policies or CloudFormation templates themselves. Users lacking sufficient AWS permissions can request them from their AWS admin directly within the setup flow, and every created role follows least-privilege principles. _Teams automating cloud permission grants can track approaches like this via daily.dev._ ## Similar posts on daily.dev - [Databricks and AWS Partner to Simplify Infrastructure Setup](https://daily.dev/posts/databricks-and-aws-partner-to-simplify-infrastructure-setup-1nevracbz) · databricks · 0 upvotes · 0 comments - [Simplified permissions for Amazon S3 Tables and Iceberg materialized views are now available in AWS GovCloud \(US\) Regions](https://daily.dev/posts/simplified-permissions-for-amazon-s3-tables-and-iceberg-materialized-views-are-now-available-in-aws--me0dinp3d) · AWS · 0 upvotes · 0 comments - [Amazon Quick now supports S3 tables bucket as a data source](https://daily.dev/posts/amazon-quick-now-supports-s3-tables-bucket-as-a-data-source-awsjs4sqe) · AWS · 0 upvotes · 0 comments - [Load data from S3 without static credentials](https://daily.dev/posts/load-data-from-s3-without-static-credentials-ye4if8hi2) · SingleStore · 20 upvotes · 1 comments - [AWS Launches Amazon S3 Files: Bridging Object and File Storage](https://daily.dev/posts/aws-launches-amazon-s3-files-bridging-object-and-file-storage-eaqooxiev) · C\# Corner · 0 upvotes · 0 comments --- Tags: [#aws-s3](https://daily.dev/tags/aws-s3), [#databricks](https://daily.dev/tags/databricks), [#aws-iam](https://daily.dev/tags/aws-iam), [#unity-catalog](https://daily.dev/tags/unity-catalog) [View this post on daily.dev](https://daily.dev/posts/connect-amazon-s3-data-to-databricks-with-delegated-iam-permissions-wjxjv02uq) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Connect Amazon S3 data to Databricks with Delegated IAM Permissions","url":"https://daily.dev/posts/connect-amazon-s3-data-to-databricks-with-delegated-iam-permissions-wjxjv02uq","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/connect-amazon-s3-data-to-databricks-with-delegated-iam-permissions-wjxjv02uq"},"datePublished":"2026-07-23T15:47:20.360Z","dateModified":"2026-09-13T20:30:41.688Z","description":"Databricks has made connecting Amazon S3 buckets significantly easier with a new Automatic Setup flow now generally available. Previously requiring 140-line...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/889c20243f57829b63d4344f5d63cbf4?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/889c20243f57829b63d4344f5d63cbf4?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"databricks","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"databricks","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/fa7aa720f2db4d1eba826814730482c8","url":"https://daily.dev/sources/databricks"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/connect-amazon-s3-data-to-databricks-with-delegated-iam-permissions-wjxjv02uq","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"aws-s3,databricks,aws-iam,unity-catalog","timeRequired":"PT4M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"databricks","item":"https://daily.dev/sources/databricks"},{"@type":"ListItem","position":3,"name":"Connect Amazon S3 data to Databricks with Delegated IAM Permissions"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/connect-amazon-s3-data-to-databricks-with-delegated-iam-permissions-wjxjv02uq#faq","mainEntity":[{"@type":"Question","name":"How do I connect an Amazon S3 bucket to Databricks without manually writing IAM trust policies?","acceptedAnswer":{"@type":"Answer","text":"Databricks now offers Automatic Setup for Amazon S3, generally available, which uses AWS IAM temporary delegation to provision the connection for you. In Catalog Explorer, go to External Locations, choose Create, specify the bucket and access level, then log into AWS to grant Databricks temporary, time-bounded authorization. Databricks then automatically creates the IAM role, trust policy, and bucket permissions instead of requiring manual authoring of a 140-line IAM trust policy and CloudFormation templates. daily.dev surfaces updates like this for engineers wiring cloud storage into governed data platforms."}},{"@type":"Question","name":"What is AWS IAM temporary delegation used for in Databricks external location setup?","acceptedAnswer":{"@type":"Answer","text":"It lets an AWS user with sufficient permissions grant Databricks a time-bounded authorization to provision the IAM roles and S3 bucket permissions needed for an external location, without the user manually configuring trust policies or CloudFormation templates themselves. Users lacking sufficient AWS permissions can request them from their AWS admin directly within the setup flow, and every created role follows least-privilege principles. Teams automating cloud permission grants can track approaches like this via daily.dev."}}]} ```