Cloudflare R2

Record your Cloudflare R2 connection as cloud infrastructure evidence. Automated collection is not available for this provider yet.

Connect with an API token

1. In Cloudflare R2:

   1. In the Cloudflare dashboard, go to the R2 object storage page.
   2. Under the Account Details section, select Manage next to API Tokens.
   3. Choose Create Account API token (or Create User API token).
   4. Under Permissions, choose Admin Read only (list buckets and view bucket configuration, read and list objects).
   5. Create the token and copy the values shown; you will not be able to access the Secret Access Key again.

   Where to find the other values:

   • Base URL (optional): The S3 endpoint is https://<ACCOUNT_ID>.r2.cloudflarestorage.com.
   • Account / Org / Workspace (optional): Your Cloudflare Account ID: on any domain's Overview page, the API section shows it, or use the dashboard search › Copy account ID.

   Cloudflare R2 shows the secret only once, so copy it before you leave the page.

   Source: developers.cloudflare.com, developers.cloudflare.com, checked 2026-10-07.

2. On Compliance › Connectors, open Cloudflare R2, click Connect, choose API token and fill in:

   Field	What to enter
   API token / Personal access token	Required. Stored encrypted and never shown again.
   Base URL (optional)	—
   Account / Org / Workspace (optional)	—

3. Click Connect with token.

Frameworks

No automated compliance test reads Cloudflare R2 yet, so no framework lists it. How connectors provide evidence for frameworks: Frameworks and connectors.

Related

• Cloud Infrastructure connectors
• Compliance connectors: how connecting works, card statuses and multiple accounts
• Connector setup reference: every connector in one table
• Frameworks and connectors: how connectors provide evidence for frameworks