# Connect a data source
<a name="kb-managed-connect-ds"></a>

After finishing the configurations for your knowledge base, you connect a supported data source to the knowledge base.

Amazon Bedrock managed knowledge bases support connecting to unstructured data sources. Select a topic to learn how to connect to that type of data source:

**Note**  
For managed knowledge bases, the `CreateDataSource` operation is asynchronous. The data source status transitions from `CREATING` to `AVAILABLE` when the operation completes.

To learn how to connect to a data source using the Amazon Bedrock console, select the topic that corresponds to your data source type at the bottom of this page:

To connect to a data source using the Amazon Bedrock API, send a [CreateDataSource](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_CreateDataSource.html) request with an [Agents for Amazon Bedrock runtime endpoint](https://docs.aws.amazon.com/general/latest/gr/bedrock.html#bra-rt).

**Required fields:**



| Field | Description | 
| --- | --- | 
| knowledgeBaseId | The ID of the knowledge base. | 
| name | A name for the data source. | 
| dataSourceConfiguration | Specify the data source type in the type field and include the corresponding configuration. For more details about connector-specific configurations, select the topic for the connector from the topics at the bottom of this page. | 

Within `dataSourceConfiguration`, you must specify the following:
+ `type` – Must be `MANAGED_KNOWLEDGE_BASE_CONNECTOR`.
+ `managedKnowledgeBaseConnectorConfiguration` – Configuration for the connector. Contains the following fields:
  + `connectorParameters` (required) – Contains a `type` field that specifies the connector type and a required `version` field set to `1`. Supported type values are `S3`, `ONEDRIVE`, `CONFLUENCE`, `SHAREPOINT`, `WEB_CRAWLER`, and `GOOGLE_DRIVE`. The remaining fields in `connectorParameters` differ by connector type — refer to each data connector page for more details.
  + `deletionProtectionConfiguration` (optional) – A safeguard against accidental bulk deletion of indexed content. Contains `deletionProtectionStatus` (`ENABLED` or `DISABLED`) and, when enabled, an optional `deletionProtectionThreshold` (0–100, defaults to 15). The threshold is the maximum percentage of documents that a sync job can delete from your index. If a sync would delete more than this percentage, the sync skips its delete phase, leaving your indexed documents in place. Not supported for the Custom connector.
  + `mediaExtractionConfiguration` (optional) – Configuration for extracting media (images, audio, video) from data source files. Contains three sub-configurations that you can enable independently:
    + `imageExtractionConfiguration` (optional) – Processes, extracts, and indexes content from standalone image files (.png, .jpg, .jpeg, .jpe, .tif, .tiff, .gif, .bmp, .webp, .svg, .jp2, .heic) and embedded visuals in .pdf, .docx, .ppt, .pptx files.
    + `audioExtractionConfiguration` (optional) – Processes, extracts, and indexes content from supported audio files (.mp3, .wav, .m4a, .flac, .ogg).
    + `videoExtractionConfiguration` (optional) – Processes, extracts, and indexes content from supported video files (.mp4, .mov, .m4v).

    For the full field reference, see [MediaExtractionConfiguration](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_MediaExtractionConfiguration.html) in the Amazon Bedrock API Reference.
  + `syncSchedule` (optional) – Sets a recurring schedule on which Amazon Bedrock automatically syncs the data source. Specify exactly one of the following:
    + `daily` – An empty object. Syncs once per day at a system-chosen off-peak time.
    + `weekly` – Contains a required `dayOfWeek` field, with a value from `SUNDAY` to `SATURDAY`.
    + `monthly` – Contains a required `dayOfMonth` field, which holds either a `dayNumber` from 1 to 28 or an empty `lastDayOfMonth` object.

    Omit `syncSchedule` to sync on demand only. For more information, see [Set a sync schedule for a data source](kb-managed-sync.md#kb-managed-sync-schedule).

**Optional fields:**



| Field | Description | 
| --- | --- | 
| description | Provide a description for the data source. | 
| vectorIngestionConfiguration | Contains configurations for customizing the ingestion process. For more information, see [Customize ingestion for a data source](kb-managed-customize-ingestion.md). | 
| clientToken | To ensure the API request completes only once. For more information, see [Ensuring idempotency](https://docs.aws.amazon.com/ec2/latest/devguide/ec2-api-idempotency.html). | 

The following example shows a `CreateDataSource` request with an S3 connector:

```
{
    "knowledgeBaseId": "{{your-knowledge-base-id}}",
    "name": "{{my-s3-data-source}}",
    "description": "{{S3 data source for my managed knowledge base}}",
    "dataSourceConfiguration": {
        "type": "MANAGED_KNOWLEDGE_BASE_CONNECTOR",
        "managedKnowledgeBaseConnectorConfiguration": {
            "mediaExtractionConfiguration": {
                "imageExtractionConfiguration": {
                    "imageExtractionStatus": "ENABLED"
                }
            },
            "deletionProtectionConfiguration": {
                "deletionProtectionStatus": "ENABLED",
                "deletionProtectionThreshold": 15
            },
            "syncSchedule": {
                "weekly": {
                    "dayOfWeek": "MONDAY"
                }
            },
            "connectorParameters": {
                "type": "S3",
                "version": "1",
                "connectionConfiguration": {
                    "bucketName": "{{my-bucket-name}}",
                    "bucketOwnerAccountId": "{{123456789012}}"
                },
                "filterConfiguration": {
                    "maxFileSizeInMegaBytes": "50"
                }
            }
        }
    }
}
```

To learn more about a specific connector and its configuration, select a topic below.

For third-party data sources that support user-managed setup (3LO), such as SharePoint, OneDrive, and Confluence, you need specific AWS Identity and Access Management permissions to sign in. For more information, see [IAM permissions for user-managed setup (3LO)](kb-managed-3lo-setup.md).

**Topics**
+ [IAM permissions for user-managed setup (3LO)](kb-managed-3lo-setup.md)
+ [Box](kb-managed-ds-box.md)
+ [Amazon S3](kb-managed-ds-s3.md)
+ [Confluence](kb-managed-ds-confluence.md)
+ [Confluence Data Center](kb-managed-ds-confluence-onprem.md)
+ [Custom](kb-managed-ds-custom.md)
+ [Google Drive](kb-managed-ds-googledrive.md)
+ [Microsoft OneDrive](kb-managed-ds-onedrive.md)
+ [ServiceNow](kb-managed-ds-servicenow.md)
+ [Microsoft SharePoint](kb-managed-ds-sharepoint.md)
+ [Web Crawler](kb-managed-ds-webcrawler.md)
+ [Configure VPC connectivity for a data source](kb-managed-vpc-configuration.md)