AS2 IN. AMAZON S3 OUT. NO SCRIPTS.

Receive AS2 messages and land them in your S3 bucket

Receive AS2 messages from your trading partners and have each decrypted, signature-verified payload delivered into your Amazon S3 or S3-compatible bucket. DocEvent runs the AS2 endpoint and the MDN receipts; the documents simply appear in your bucket.
From
AS2
To
Amazon S3
Receive endpoints
Cloud storage
Amazon S3
S3 Compatiblepull
GCS Blobpull
Azure Blobpull
Azure Data Lakepull
Azure Filespull
Servers & protocols
FTP Pull
SFTP Pull
HTTP Upload
Email
Apps & trading partners
SharePointpull
AS2trading partner
On-premise
Filerouterlocal filesystem
Agentlocal filesystem
DocEvent
routes · retries · logs
Send endpoints
Cloud storage
Amazon S3s3-compatible
Servers & protocols
FTP / FTPS
SFTP
Webhook
Email
Apps & trading partners
SharePoint
AS2trading partner
On-premise
Filerouterlocal filesystem
Agentlocal filesystem
Get started for free — our basic plan is free forever.

How AS2 to Amazon S3 routing works

Source

AS2

Files arrive from an AS2 trading partner over the internet — signed, encrypted, and acknowledged with an MDN receipt.
DocEvent Channel
routes · retries · logs
Destination

Amazon S3

Files are delivered into your Amazon S3 or S3-compatible bucket - Cloudflare R2, MinIO, Backblaze B2, Wasabi and more.
1

File arrives via AS2

A hosted AS2 (RFC 4130) receive endpoint with its own URL — nothing to install and no AS2 server to run. Each source is pinned to one trading partner, so a message claiming any other AS2 identity is rejected, and the partner's certificate must verify every message. Encrypted payloads are decrypted and signatures verified automatically, and the MDN receipt is returned the way the partner asked for it: synchronously in the HTTP reply, asynchronously to their return URL, or not at all. Duplicate messages are detected per RFC 4130.
2

Channel routes it

DocEvent's channel server matches the incoming file to your configured route, queues it for delivery, and ensures no file is ever lost — even during downstream outages.
3

Delivered to Amazon S3

Delivery into any bucket that speaks the S3 API - Amazon S3, Cloudflare R2, MinIO, Backblaze B2, Wasabi, Supabase Storage and friends (custom endpoint URL and path-style addressing supported). Authenticate with an access key, or on Amazon S3 let DocEvent assume an IAM role in your account so no long-lived credentials change hands. Configurable key prefix, and a built-in connection test that verifies the bucket, credentials and permissions before the first file flows.

Common use cases

Real workflows that teams automate with a AS2 Amazon S3 channel.
  • Land partner EDI in the bucket your processing pipeline already reads
  • Terminate AS2 in the cloud and keep the documents in object storage
  • Archive verified AS2 payloads under your own lifecycle policies
  • Feed analytics from trading-partner traffic without an AS2 server
The two ends don't have to be the same company — invite a customer or trading partner into the channel and they run the AS2 or Amazon S3 side under their own account, with their own credentials. Learn how shared channels work.

Technical details

Source:
AS2
A hosted AS2 (RFC 4130) receive endpoint with its own URL — nothing to install and no AS2 server to run. Each source is pinned to one trading partner, so a message claiming any other AS2 identity is rejected, and the partner's certificate must verify every message. Encrypted payloads are decrypted and signatures verified automatically, and the MDN receipt is returned the way the partner asked for it: synchronously in the HTTP reply, asynchronously to their return URL, or not at all. Duplicate messages are detected per RFC 4130.
Files arrive from an AS2 trading partner over the internet — signed, encrypted, and acknowledged with an MDN receipt.
Destination:
Amazon S3
Delivery into any bucket that speaks the S3 API - Amazon S3, Cloudflare R2, MinIO, Backblaze B2, Wasabi, Supabase Storage and friends (custom endpoint URL and path-style addressing supported). Authenticate with an access key, or on Amazon S3 let DocEvent assume an IAM role in your account so no long-lived credentials change hands. Configurable key prefix, and a built-in connection test that verifies the bucket, credentials and permissions before the first file flows.
Files are delivered into your Amazon S3 or S3-compatible bucket - Cloudflare R2, MinIO, Backblaze B2, Wasabi and more.
Automatic retries with exponential back-off
Full end-to-end audit log for every file
Zero-code setup via the DocEvent UI
Reliable delivery even during downstream outages

You focus on integration,
we'll focus on delivery.

Get started for free