--- title: Supported cloud providers in Cloud Connector description: Cloud providers and storage services supported by Cloud Connector. image: https://developers.cloudflare.com/core-services-preview.png --- > Documentation Index > Fetch the complete documentation index at: https://developers.cloudflare.com/rules/llms.txt > Use this file to discover all available pages before exploring further. [Skip to content](#%5Ftop) ### Tags [ AWS ](https://developers.cloudflare.com/search/?tags=AWS)[ Azure ](https://developers.cloudflare.com/search/?tags=Azure)[ GCP ](https://developers.cloudflare.com/search/?tags=GCP) # Supported cloud providers in Cloud Connector Cloud Connector currently supports the following cloud providers and services: * Cloudflare R2 * Amazon Web Services - S3 * Google Cloud Platform - Cloud Storage * Microsoft Azure - Blob Storage ## Cloudflare R2 The Cloudflare R2 bucket must be public and [exposed using a custom domain](https://developers.cloudflare.com/r2/buckets/public-buckets/). Buckets exposed using an `r2.dev` subdomain are not supported. Additionally, the custom domain must be defined in the same zone where you are configuring the Cloud Connector rule. ## Amazon Web Services - S3 The hostname of your S3 bucket URL must have one of the following formats (where `*` is a wildcard character): * `*s3.amazonaws.com` * `*s3..amazonaws.com` * `*s3-website..amazonaws.com` * `*s3-website-.amazonaws.com` Cloud Connector supports both subdomain and URI path-style URLs: * **Subdomain-style URLs**: Set the hostname to `.s3.amazonaws.com`. In this case, your files are accessible directly under the root of the bucket. For example, `https://example.com/index.html` will map to `https://.s3.amazonaws.com/index.html`. When using **Full (Strict)** SSL/TLS mode, the `` cannot include dots (use dashes instead). Refer to [SSL connections to AWS S3 endpoints](#ssl-connections-to-aws-s3-endpoints) for details. * **URI path-style URLs**: Set the hostname to `s3.amazonaws.com`. Here, your bucket name must be part of the URI path in your requests. For example, if your bucket name is ``, files will be available on paths like `https://example.com//index.html`, and your Cloud Connector rule should filter traffic based on the URI path starting with `/`. ### SSL connections to AWS S3 endpoints The SSL setting applied to requests between Cloud Connector and AWS S3 depends on the type of S3 endpoint you use: * **HTTPS-supported endpoints**: For hostnames like `*s3..amazonaws.com` and `*s3.amazonaws.com`, Cloudflare will connect to AWS S3 over HTTPS if you set your zone's SSL/TLS mode to **Full** or **Full (Strict)**. When using **Full (Strict)**, the bucket name cannot include dots (use dashes instead). * **Non-HTTPS endpoints**: For website-style hostnames such as `*s3-website..amazonaws.com` or `*s3-website-.amazonaws.com`, which do not support HTTPS, Cloudflare will default to **Flexible SSL**. ### Get the bucket URL 1. Go to the [Amazon S3 console ↗](https://console.aws.amazon.com/s3/) and select **Buckets** in the navigation pane. 2. Select the bucket name. 3. Go to the **Properties** tab. 4. Select the **Static Website Hosting** card. The **Endpoint** field shows your bucket URL. For more information, refer to the [Amazon S3 documentation ↗](https://docs.aws.amazon.com/AmazonS3/latest/userguide/EnableWebsiteHosting.html). Once you configure Cloud Connector with your storage provider's public bucket, you may wish that only Cloudflare can access the objects in that bucket. To achieve this, check your provider's documentation on how to create a policy that only allows incoming requests from [Cloudflare IP addresses ↗](https://www.cloudflare.com/ips/). ## Google Cloud Platform - Cloud Storage The hostname of your Cloud Storage bucket URL must be the following (where `*` is a wildcard character): * `*storage.googleapis.com` * `*storage.cloud.google.com` Cloud Connector supports both subdomain and URI path-style URLs: * **Subdomain-style URLs**: Set the hostname to `.storage.googleapis.com`. In this case, your files are accessible directly under the root of the bucket. For example, `https://example.com/index.html` will map to `https://.storage.googleapis.com/index.html`. * **URI path-style URLs**: Set the hostname to `storage.googleapis.com`. Here, your bucket name must be part of the URI path in your requests. For example, if your bucket name is ``, files will be available on paths like `https://example.com//index.html`, and your Cloud Connector rule should filter traffic based on the URI path starting with `/`. ### Get the bucket URL 1. Go to the [Google Cloud console ↗](https://console.cloud.google.com/storage/browser) and select **Buckets**. 2. Select the bucket name. 3. For one of the files already in the bucket, select the link icon in the **Public** column to copy the file's public URL to the clipboard. The file URL will have the following format: `https://storage.googleapis.com//` To obtain the subdomain bucket URL, refactor the file URL to `.storage.googleapis.com` format. To obtain the URI path bucket URL, remove `https://` and `//` from the file URL. If the files in your bucket are not publicly accessible, you must change the bucket permissions. For details, refer to the [Google Cloud Storage documentation ↗](https://cloud.google.com/storage/docs/access-control/making-data-public#buckets). Once you configure Cloud Connector with your storage provider's public bucket, you may wish that only Cloudflare can access the objects in that bucket. To achieve this, check your provider's documentation on how to create a policy that only allows incoming requests from [Cloudflare IP addresses ↗](https://www.cloudflare.com/ips/). ## Microsoft Azure - Blob Storage The hostname of your Blob Storage bucket URL must have one of the following formats: * `.blob.core.windows.net` * `.web.core.windows.net` For Azure Blog Storage, Cloud Connector supports only subdomain URLs like `.blob.core.windows.net`. This means that your files will be accessible directly under the root of the bucket. For example, `https://example.com/index.html` will map to `https://.blob.core.windows.net/index.html`. ### Get the bucket URL 1. Go to the [Azure portal ↗](https://portal.azure.com/) and select your storage account. 2. In the menu pane, under **Settings**, select **Endpoints**. 3. Get your bucket URL from the **Blob service** endpoint or the **Static website** endpoint. If the blob container is not configured for public access, you must change the container settings. For details, refer to the [Azure Storage documentation ↗](https://learn.microsoft.com/en-us/azure/storage/blobs/anonymous-read-access-configure?tabs=portal). Once you configure Cloud Connector with your storage provider's public bucket, you may wish that only Cloudflare can access the objects in that bucket. To achieve this, check your provider's documentation on how to create a policy that only allows incoming requests from [Cloudflare IP addresses ↗](https://www.cloudflare.com/ips/). ```json {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"item":{"@id":"/directory/","name":"Directory"}},{"@type":"ListItem","position":2,"item":{"@id":"/rules/","name":"Rules"}},{"@type":"ListItem","position":3,"item":{"@id":"/rules/cloud-connector/","name":"Cloud Connector"}},{"@type":"ListItem","position":4,"item":{"@id":"/rules/cloud-connector/providers/","name":"Supported cloud providers in Cloud Connector"}}]} ```