--- description: Cloud providers and storage services supported by Cloud Connector. title: Supported cloud providers in Cloud Connector image: https://developers.cloudflare.com/og-docs.png --- [Skip to content](#main-content) > Documentation Index > Fetch the complete documentation index at: https://developers.cloudflare.com/rules/llms.txt > Use this file to discover all available pages before exploring further. # Supported cloud providers in Cloud Connector Last updated Aug 24, 2026|Copy as Markdown|[View as Markdown](https://e8aee267.previews.developers.cloudflare.com/rules/cloud-connector/providers/index.md)|[Agent setup](https://e8aee267.previews.developers.cloudflare.com/agent-setup/) Cloud Connector currently supports the following cloud providers and services: * Cloudflare R2 * Amazon Web Services - S3 * Google Cloud Platform - Cloud Storage * Microsoft Azure - Blob Storage * Oracle Cloud - Object Storage ## Cloudflare R2 The Cloudflare R2 bucket must be public and [exposed using a custom domain](https://e8aee267.previews.developers.cloudflare.com/r2/buckets/public-buckets/). Buckets exposed using an `r2.dev` subdomain are not supported. Additionally, the custom domain must be defined in the same zone where you are configuring the Cloud Connector rule. ## Amazon Web Services - S3 The hostname of your S3 bucket URL must have one of the following formats (where `*` is a wildcard character): * `*s3.amazonaws.com` * `*s3..amazonaws.com` * `*s3-website..amazonaws.com` * `*s3-website-.amazonaws.com` Cloud Connector supports both subdomain and URI path-style URLs: * **Subdomain-style URLs**: Set the hostname to `.s3.amazonaws.com`. In this case, your files are accessible directly under the root of the bucket. For example, `https://example.com/index.html` will map to `https://.s3.amazonaws.com/index.html`. When using **Full (Strict)** SSL/TLS mode, the `` cannot include dots (use dashes instead). Refer to [SSL connections to AWS S3 endpoints](#ssl-connections-to-aws-s3-endpoints) for details. * **URI path-style URLs**: Set the hostname to `s3.amazonaws.com`. Here, your bucket name must be part of the URI path in your requests. For example, if your bucket name is ``, files will be available on paths like `https://example.com//index.html`, and your Cloud Connector rule should filter traffic based on the URI path starting with `/`. ### SSL connections to AWS S3 endpoints The SSL setting applied to requests between Cloud Connector and AWS S3 depends on the type of S3 endpoint you use: * **HTTPS-supported endpoints**: For hostnames like `*s3..amazonaws.com` and `*s3.amazonaws.com`, Cloudflare will connect to AWS S3 over HTTPS if you set your zone's SSL/TLS mode to **Full** or **Full (Strict)**. When using **Full (Strict)**, the bucket name cannot include dots (use dashes instead). * **Non-HTTPS endpoints**: For website-style hostnames such as `*s3-website..amazonaws.com` or `*s3-website-.amazonaws.com`, which do not support HTTPS, Cloudflare will default to **Flexible SSL**. ### Get the bucket URL 1. Go to the [Amazon S3 console ↗](https://console.aws.amazon.com/s3/) and select **Buckets** in the navigation pane. 2. Select the bucket name. 3. Go to the **Properties** tab. 4. Select the **Static Website Hosting** card. The **Endpoint** field shows your bucket URL. For more information, refer to the [Amazon S3 documentation ↗](https://docs.aws.amazon.com/AmazonS3/latest/userguide/EnableWebsiteHosting.html). Once you configure Cloud Connector with your storage provider's public bucket, you may wish that only Cloudflare can access the objects in that bucket. To achieve this, check your provider's documentation on how to create a policy that only allows incoming requests from [Cloudflare IP addresses ↗](https://www.cloudflare.com/ips/). ## Google Cloud Platform - Cloud Storage The hostname of your Cloud Storage bucket URL must be the following (where `*` is a wildcard character): * `*storage.googleapis.com` * `*storage.cloud.google.com` Cloud Connector supports both subdomain and URI path-style URLs: * **Subdomain-style URLs**: Set the hostname to `.storage.googleapis.com`. In this case, your files are accessible directly under the root of the bucket. For example, `https://example.com/index.html` will map to `https://.storage.googleapis.com/index.html`. * **URI path-style URLs**: Set the hostname to `storage.googleapis.com`. Here, your bucket name must be part of the URI path in your requests. For example, if your bucket name is ``, files will be available on paths like `https://example.com//index.html`, and your Cloud Connector rule should filter traffic based on the URI path starting with `/`. ### Get the bucket URL 1. Go to the [Google Cloud console ↗](https://console.cloud.google.com/storage/browser) and select **Buckets**. 2. Select the bucket name. 3. For one of the files already in the bucket, select the link icon in the **Public** column to copy the file's public URL to the clipboard. The file URL will have the following format: `https://storage.googleapis.com//` To obtain the subdomain bucket URL, refactor the file URL to `.storage.googleapis.com` format. To obtain the URI path bucket URL, remove `https://` and `//` from the file URL. If the files in your bucket are not publicly accessible, you must change the bucket permissions. For details, refer to the [Google Cloud Storage documentation ↗](https://cloud.google.com/storage/docs/access-control/making-data-public#buckets). Once you configure Cloud Connector with your storage provider's public bucket, you may wish that only Cloudflare can access the objects in that bucket. To achieve this, check your provider's documentation on how to create a policy that only allows incoming requests from [Cloudflare IP addresses ↗](https://www.cloudflare.com/ips/). ## Microsoft Azure - Blob Storage The hostname of your Blob Storage bucket URL must have one of the following formats: * `.blob.core.windows.net` * `.web.core.windows.net` For Azure Blog Storage, Cloud Connector supports only subdomain URLs like `.blob.core.windows.net`. This means that your files will be accessible directly under the root of the bucket. For example, `https://example.com/index.html` will map to `https://.blob.core.windows.net/index.html`. ### Get the bucket URL 1. Go to the [Azure portal ↗](https://portal.azure.com/) and select your storage account. 2. In the menu pane, under **Settings**, select **Endpoints**. 3. Get your bucket URL from the **Blob service** endpoint or the **Static website** endpoint. If the blob container is not configured for public access, you must change the container settings. For details, refer to the [Azure Storage documentation ↗](https://learn.microsoft.com/en-us/azure/storage/blobs/anonymous-read-access-configure?tabs=portal). Once you configure Cloud Connector with your storage provider's public bucket, you may wish that only Cloudflare can access the objects in that bucket. To achieve this, check your provider's documentation on how to create a policy that only allows incoming requests from [Cloudflare IP addresses ↗](https://www.cloudflare.com/ips/). ## Oracle Cloud Infrastructure Object Storage Cloud Connector supports Oracle Cloud Infrastructure (OCI) Object Storage through the Amazon S3 Compatibility API. Public buckets only Cloud Connector does not authenticate requests to OCI. Your bucket must allow anonymous object reads. Private buckets and pre-authenticated request URLs are not supported. Enter an OCI hostname without a protocol, port, or path. Cloud Connector accepts the following formats: | Addressing style | Hostname format | Request path | | ------------------------ | ------------------------------------------------------------------- | ------------------------------ | | Path style (traditional) | .compat.objectstorage..oraclecloud.com | // | | Path style (dedicated) | .compat.objectstorage..oci.customer-oci.com | // | | Virtual-hosted style | .vhcompat.objectstorage..oci.customer-oci.com | / | For path-style endpoints, include the bucket name in the incoming request path. For example, `https://example.com//index.html` maps to the same path on the OCI endpoint. For virtual-hosted endpoints, the bucket name is part of the hostname. An incoming request to `https://example.com/index.html` maps to `/index.html` on that bucket. OCI requires virtual-hosted bucket names to use a regional scope and a DNS-compatible name that is unique within the region. For more information, refer to [Object Storage Dedicated Endpoints ↗](https://docs.oracle.com/en-us/iaas/Content/Object/Concepts/dedicatedendpoints.htm), [Amazon S3 Compatibility API Hosted Style Support in Object Storage ↗](https://docs.oracle.com/en-us/iaas/Content/Object/s3-virtual-style.htm), and [Changing an Object Storage Bucket's Visibility ↗](https://docs.oracle.com/en-us/iaas/Content/Object/Tasks/managingbuckets%5Ftopic-To%5Fchange%5Fthe%5Fvisibility%5Fof%5Fa%5Fbucket.htm). Once you configure Cloud Connector with your storage provider's public bucket, you may wish that only Cloudflare can access the objects in that bucket. To achieve this, check your provider's documentation on how to create a policy that only allows incoming requests from [Cloudflare IP addresses ↗](https://www.cloudflare.com/ips/). Was this helpful? YesNo ## On this page [![](https://e8aee267.previews.developers.cloudflare.com/_astro/logo.te5VL_aD.svg)Docs](https://e8aee267.previews.developers.cloudflare.com/) ```json {"@context":"https://schema.org","@type":"TechArticle","@id":"https://developers.cloudflare.com/rules/cloud-connector/providers/#page","headline":"Supported cloud providers in Cloud Connector · Cloudflare Rules docs","description":"Cloud providers and storage services supported by Cloud Connector.","url":"https://developers.cloudflare.com/rules/cloud-connector/providers/","inLanguage":"en","image":"https://developers.cloudflare.com/og-docs.png","dateModified":"2026-08-24","publisher":{"@type":"Organization","name":"Cloudflare","url":"https://www.cloudflare.com/"},"isPartOf":{"@type":"WebSite","@id":"https://developers.cloudflare.com/#website","name":"Cloudflare Docs","url":"https://developers.cloudflare.com/"},"keywords":["AWS","Azure","GCP","OCI"]} ```