automation-suite
2022.10
false
UiPath logo, featuring letters U and I in white

Automation Suite installation guide

Last updated Nov 6, 2025

Configuring the external objectstore

Supported objectstores

Automation Suite supports the following external objectstores:

  • Azure Storage (Azure Blob Storage)
  • AWS S3
  • S3 compatible objectstore.
Note:
  • Only some S3-compatible objectstores are compatible with Automation Suite. Many storage providers do not fully support the S3 storage APIs required by the products installed on Automation Suite.
  • When using Premium performance tier in Azure Blob Storage, you must select Block blobs. File shares and Page blobs are not supported. Using unsupported blob types may cause the prerequisites check to fail.
  • For Automation Suite to function properly when using pre-signed URLs, you must make sure that your external objectstore is accessible from the Automation Suite cluster, browsers, and all your machines, including workstations and robot machines.
  • When configuring the external object storage, you must follow the naming rules and conventions from your provider for both bucket_name_prefix and bucket_name_suffix. In addition to that, the suffix and prefix must have a combined length of no more than 25 characters, and you must not end the prefix or start the suffix with a hyphen (-) as we already add the character for you automatically.

  • The Server Side Encryption with Key Management Service (SSE-KMS) can only be enabled on the Automation Suite buckets deployed in any region created after January 30, 2014.

    SSE-KMS functionality requires pure SignV4 APIs. Regions created before January 30, 2014 do not use pure SignV4 APIs due to backward compatibility with SignV2. Therefore, SSE-KMS is only functional in regions that use SignV4 for communication. To find out when the various regions were provisioned, refer to the AWS documentation.

S3-compatible objectstore requirements

Your S3-compatible objectstore must have the following APIs for the products you plan to install on Automation Suite:

UiPath namingAWS naming

Platform

Orchestrator

AI Center

Apps

Document Understanding

Test Manager

Data Service

Process Mining

Task Mining

GET_OBJECT

GetObjectavailableavailableavailableavailableavailableavailableavailableavailableavailable

HEAD_OBJECT

HeadObject

N/A

availableavailableavailableavailableavailable

N/A

availableavailable

PUT_OBJECT

PutObjectavailableavailableavailableavailableavailableavailableavailableavailableavailable

DELETE_OBJECT

DeleteObjectavailableavailableavailableavailableavailableavailableavailableavailableavailable

CREATE_MULTIPART_UPLOAD

CreateMultipartUploadavailableavailableavailable

N/A

N/A

available

N/A

availableavailable

UPLOAD_PART

UploadPartavailableavailableavailable

N/A

N/A

available

N/A

availableavailable

UPLOAD_PART_COPY

UploadPartCopyavailableavailable

N/A

N/A

N/A

N/A

N/A

availableavailable

COMPLETE_MULTIPART_UPLOAD

CompleteMultipartUploadavailableavailableavailable

N/A

N/A

available

N/A

availableavailable
PRESIGNED_URLGeneratePresignedUrl (SDK)

N/A

N/A

N/A

N/A

available

N/A

N/A

N/A

N/A

GET_BUCKET_LIST_OBJECTS

ListObjectsV2availableavailableavailableavailableavailableavailableavailableavailableavailable

LIST_MULTIPART_UPLOADS

ListMultipartUploadsavailableavailableavailable

N/A

N/A

N/A

N/A

availableavailable

DELETE_MULTIPLE_OBJECTS

DeleteMultipleObjects

N/A

availableavailable

N/A

N/A

N/A

N/A

availableavailable

PUT_OBJECT_COPY

CopyObject

N/A

N/A

available

N/A

N/A

N/A

N/A

availableavailable

LIST_PARTS

ListParts

N/A

N/A

N/A

N/A

N/A

N/A

N/A

availableavailable

PUT_BUCKET

PutBucket

N/A

N/A

available

N/A

N/A

N/A

N/A

N/A

available

LIST_BUCKETS

ListBuckets

N/A

N/A

available

N/A

N/A

N/A

N/A

N/A

available

HEAD_BUCKET

HeadBucket

N/A

N/A

N/A

N/A

N/A

N/A

N/A

N/A

available

To ensure secure and compatible communication with Automation Suite, your S3-compatible objectstore must support one or more of the following secure TLS cipher suites:

  • TLS 1.3:
    • TLS_AES_128_GCM_SHA256
    • TLS_AES_256_GCM_SHA384
    • TLS_CHACHA20_POLY1305_SHA256
  • TLS 1.2:
    • TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA
    • TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA
    • TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
    • TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
    • TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
    • TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
    • TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
    • TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
    • TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
    • TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256
Note: The list of supported cipher suites may evolve over time to align with security best practices and updates in the Go cryptographic library. Refer to the latest Go documentation for the current list.

S3-compatible objectstore configuration

Make sure the following CORS policy is configured at your objectstore server or the bucket level.

This is the CORS policy in JSON format:

JSON
[
    {
        "AllowedHeaders": [
            "*"
        ],
        "AllowedMethods": [
            "POST",
            "GET",
            "HEAD",
            "DELETE",
            "PUT"
        ],
        "AllowedOrigins": [
            "https://{{fqdn}}"
        ],
        "ExposeHeaders": [
            "etag",
            "x-amz-server-side-encryption",
            "x-amz-request-id",
            "x-amz-id-2"
        ],
        "MaxAgeSeconds": 3000
    }
][
    {
        "AllowedHeaders": [
            "*"
        ],
        "AllowedMethods": [
            "POST",
            "GET",
            "HEAD",
            "DELETE",
            "PUT"
        ],
        "AllowedOrigins": [
            "https://{{fqdn}}"
        ],
        "ExposeHeaders": [
            "etag",
            "x-amz-server-side-encryption",
            "x-amz-request-id",
            "x-amz-id-2"
        ],
        "MaxAgeSeconds": 3000
    }
]

This is the CORS policy in XML format:

XML
<CORSConfiguration>
 <CORSRule>
   <AllowedOrigin>*</AllowedOrigin>
   <AllowedMethod>HEAD</AllowedMethod>
   <AllowedMethod>GET</AllowedMethod>
   <AllowedMethod>PUT</AllowedMethod>
   <AllowedMethod>POST</AllowedMethod>
   <AllowedMethod>DELETE</AllowedMethod>
   <AllowedHeader>*</AllowedHeader>
  <MaxAgeSeconds>3000</MaxAgeSeconds>
  <ExposeHeader>x-amz-server-side-encryption</ExposeHeader>
  <ExposeHeader>x-amz-request-id</ExposeHeader>
  <ExposeHeader>x-amz-id-2</ExposeHeader>
  <ExposeHeader>etag</ExposeHeader>
 </CORSRule>
</CORSConfiguration><CORSConfiguration>
 <CORSRule>
   <AllowedOrigin>*</AllowedOrigin>
   <AllowedMethod>HEAD</AllowedMethod>
   <AllowedMethod>GET</AllowedMethod>
   <AllowedMethod>PUT</AllowedMethod>
   <AllowedMethod>POST</AllowedMethod>
   <AllowedMethod>DELETE</AllowedMethod>
   <AllowedHeader>*</AllowedHeader>
  <MaxAgeSeconds>3000</MaxAgeSeconds>
  <ExposeHeader>x-amz-server-side-encryption</ExposeHeader>
  <ExposeHeader>x-amz-request-id</ExposeHeader>
  <ExposeHeader>x-amz-id-2</ExposeHeader>
  <ExposeHeader>etag</ExposeHeader>
 </CORSRule>
</CORSConfiguration>

Was this page helpful?

Support and Services
Get The Help You Need
UiPath Academy
Learning RPA - Automation Courses
UiPath Forum
UiPath Community Forum
Uipath Logo
Trust and Security
Terms of Use
Privacy Policy
Cookies Policy
© 2005-2025 UiPath. All rights reserved.