AWS S3 Shortcut Authentication Values
Short answer
BD You must provide the secret access key and the access key ID to authenticate the OneLake shortcut to the AWS S3 bucket.
Question
You have an Amazon Web Services (AWS) subscription that contains an Amazon Simple Storage Service (Amazon S3) bucket named bucket1. You have a Fabric tenant that contains a lakehouse named LH1. In LH1, you plan to create a OneLake shortcut to bucket1. You need to configure authentication for the connection. Which two values should you provide? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.
Key Takeaways
Configuring authentication for an S3 shortcut in Fabric tests your knowledge of AWS credential requirements, where the common trap is confusing AWS keys with Azure SAS tokens.
When creating a OneLake shortcut to an Amazon S3 bucket in Microsoft Fabric, you must authenticate using AWS credentials. This page establishes that the access key ID and secret access key are the required values.
Common mistake: Selecting the shared access signature (SAS) token (Option A) because it is used for Azure Storage, not AWS S3.
Expert Analysis
Why the Answer Is Correct
To create a OneLake shortcut to an Amazon S3 bucket, Fabric requires AWS credentials to authenticate and access the external data. The standard AWS authentication method uses an access key, which consists of two parts: the access key ID and the secret access key. Providing both values (Options B and D) allows Fabric to securely connect to the AWS S3 bucket.Why the Other Options Are Wrong
Option A is incorrect because the shared access signature (SAS) token is an Azure Storage authentication mechanism, not an AWS one. Option C is incorrect because "access ID" is not the correct terminology for AWS credentials; the correct term is "access key ID". Option E is incorrect because certificate thumbprints are used for certificate-based authentication, which is not the method used for Fabric S3 shortcuts.Community Comment Notes
The community consensus correctly identifies the access key ID and secret access key as the required values. As Pegooli noted, the official Microsoft documentation for "create-s3-shortcut" confirms these are the necessary authentication fields.Official Reference
Exam Strategy
For questions about OneLake shortcuts, carefully identify the external data source (AWS vs. Azure vs. ADLS) to determine the correct authentication method. AWS S3 always relies on the access key ID and secret access key pair.
Community Votes
100% of anonymous learners picked answer BD. Votes are pick records left by other test-takers — they are not the verified answer.
Discussion 3 contributions
Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded.
From public community threads 3
-
Pegooli 👍 3https://learn.microsoft.com/en-us/fabric/onelake/create-s3-shortcut
-
NikeshShah 👍 2https://learn.microsoft.com/sl-si/fabric/onelake/create-s3-compatible-shortcut Correct Answer BD
-
helmon 👍 2https://learn.microsoft.com/sl-si/fabric/onelake/create-s3-compatible-shortcut
Reader comments & corrections
No reader corrections yet — spotted an error or have a note? Share it below.
Related Analysis
Practice All DP-600 Questions
Access 115 questions with complete answers and detailed explanations.
View Full DP-600 Practice Test →