180 actions in the s3 service. Select an action to see its access level, resource ARNs, condition keys, and a copy-paste IAM policy.
Grants permission to abort a multipart upload
Grants permission to configure server access logs delivery to CloudWatch
Grants permission to associate Access Grants identity center
Grants permission to allow circumvention of governance-mode object retention settings
Grants permission to create Access Grant
Grants permission to Create Access Grants Instance
Grants permission to create Access Grants location
Grants permission to create a new access point
Grants permission to create an object lambda enabled accesspoint
Grants permission to create a new bucket
Grants permission to create a new S3 Metadata configuration for a specified general purpose bucket
Grants permission to create a new Amazon S3 Batch Operations job
Grants permission to create a new Multi-Region Access Point
Grants permission to create an Amazon S3 Storage Lens group
Grants permission to delete Access Grant
Grants permission to Delete Access Grants Instance
Grants permission to read Access grants instance resource policy
Grants permission to delete Access Grants location
Grants permission to delete the access point named in the URI
Grants permission to delete the object lambda enabled access point named in the URI
Grants permission to delete the policy on a specified access point
Grants permission to delete the policy on a specified object lambda enabled access point
Grants permission to delete the bucket named in the URI
Grants permission to delete the S3 Metadata configuration for a specified general purpose bucket
Grants permission to delete the policy on a specified bucket
Grants permission to remove the website configuration for a bucket
Grants permission to remove tags from an existing Amazon S3 Batch Operations job
Grants permission to delete the Multi-Region Access Point named in the URI
Grants permission to remove the null version of an object and insert a delete marker, which becomes the current version of the object
Grants permission to delete an annotation from an object
Grants permission to use the tagging subresource to remove the entire tag set from the specified object
Grants permission to remove a specific version of an object
Grants permission to delete an annotation from a specific version of an object
Grants permission to remove the entire tag set for a specific version of the object
Grants permission to delete an existing Amazon S3 Storage Lens configuration
Grants permission to remove tags from an existing Amazon S3 Storage Lens configuration
Grants permission to delete an existing S3 Storage Lens group
Grants permission to retrieve the configuration parameters and status for a batch operations job
Grants permission to retrieve the configurations for a Multi-Region Access Point
Grants permission to disassociate Access Grants identity center
Grants permission to uses the accelerate subresource to return the Transfer Acceleration state of a bucket, which is either Enabled or Suspended
Grants permission to read Access Grant
Grants permission to Read Access Grants Instance
Grants permission to Read Access Grants Instance by prefix
Grants permission to read Access grants instance resource policy
Grants permission to read Access Grants location
Grants permission to return configuration information about the specified access point
Grants permission to retrieve the configuration of the object lambda enabled access point
Grants permission to create an object lambda enabled accesspoint
Grants permission to return the access point policy associated with the specified access point
Grants permission to return the access point policy associated with the specified object lambda enabled access point
Grants permission to return the policy status for a specific access point policy
Grants permission to return the policy status for a specific object lambda access point policy
Grants permission to retrieve the PublicAccessBlock configuration for an AWS account
Grants permission to get an analytics configuration from an Amazon S3 bucket, identified by the analytics configuration ID
Grants permission to retrieve ABAC configuration for a general purpose bucket
Grants permission to use the acl subresource to return the access control list (ACL) of an Amazon S3 bucket
Grants permission to return the CORS configuration information set for an Amazon S3 bucket
Grants permission to return the Region that an Amazon S3 bucket resides in
Grants permission to return the logging status of an Amazon S3 bucket and the permissions users have to view or modify that status
Grants permission to return the S3 Metadata configuration for a specified general purpose bucket
Grants permission to get the notification configuration of an Amazon S3 bucket
Grants permission to get the Object Lock configuration of an Amazon S3 bucket
Grants permission to retrieve ownership controls on a bucket
Grants permission to return the policy of the specified bucket
Grants permission to retrieve the policy status for a specific Amazon S3 bucket, which indicates whether the bucket is public
Grants permission to retrieve the PublicAccessBlock configuration for an Amazon S3 bucket
Grants permission to return the request payment configuration for an Amazon S3 bucket
Grants permission to return the tag set associated with an Amazon S3 bucket
Grants permission to return the versioning state of an Amazon S3 bucket
Grants permission to return the website configuration for an Amazon S3 bucket
Grants permission to get Access
Grants permission to return the default encryption configuration an Amazon S3 bucket
Grants permission to get an or list all Amazon S3 Intelligent Tiering configuration in a S3 Bucket
Grants permission to return an inventory configuration from an Amazon S3 bucket, identified by the inventory configuration ID
Grants permission to return the tag set of an existing Amazon S3 Batch Operations job
Grants permission to return the lifecycle configuration information set on an Amazon S3 bucket
Grants permission to get a metrics configuration from an Amazon S3 bucket
Grants permission to return configuration information about the specified Multi-Region Access Point
Grants permission to return the access point policy associated with the specified Multi-Region Access Point
Grants permission to return the policy status for a specific Multi-Region Access Point policy
Grants permission to return the route configuration for a Multi-Region Access Point
Grants permission to retrieve objects from Amazon S3
Grants permission to return the access control list (ACL) of an object
Grants permission to retrieve an annotation from an object
Grants permission to retrieve attributes related to a specific object
Grants permission to get an object's current Legal Hold status
Grants permission to retrieve the retention settings for an object
Grants permission to return the tag set of an object
Grants permission to return torrent files from an Amazon S3 bucket
Grants permission to retrieve a specific version of an object
Grants permission to return the access control list (ACL) of a specific object version
Grants permission to retrieve an annotation from a specific version of an object
Grants permission to get an object version annotation for replication
Grants permission to retrieve attributes related to a specific version of an object
Grants permission to replicate both unencrypted objects and objects encrypted with SSE-S3 or SSE-KMS
Grants permission to return the tag set for a specific version of the object
Grants permission to get Torrent files about a different version using the versionId subresource
Grants permission to get the replication configuration information set on an Amazon S3 bucket
Grants permission to get an Amazon S3 Storage Lens configuration
Grants permission to get the tag set of an existing Amazon S3 Storage Lens configuration
Grants permission to get an Amazon S3 Storage Lens dashboard
Grants permission to get an Amazon S3 Storage Lens group
Grants permission to initiate the replication process by setting replication status of an object to pending
Grants permission to list Access Grant
Grants permission to List Access Grants Instances
Grants permission to list Access Grants locations
Grants permission to list access points
Grants permission to list object lambda enabled accesspoints
Grants permission to list all buckets owned by the authenticated sender of the request
Grants permission to list some or all of the objects in an Amazon S3 bucket (up to 1000)
Grants permission to list in-progress multipart uploads
Grants permission to list metadata about all the versions of objects in an Amazon S3 bucket
Grants permission to list caller's Access Grant
Grants permission to list current jobs and jobs that have ended recently
Grants permission to list the parts that have been uploaded for a specific multipart upload
Grants permission to list Multi-Region Access Points
Grants permission to list annotations on an object
Grants permission to list annotations on a specific version of an object
Grants permission to list Amazon S3 Storage Lens configurations
Grants permission to list S3 Storage Lens groups
Grants permission to list the tags attached to the specified resource
Grants permission to change replica ownership
Grants permission to pause S3 Replication from target source buckets to destination buckets
Grants permission to use the accelerate subresource to set the Transfer Acceleration state of an existing S3 bucket
Grants permission to put Access grants instance resource policy
Grants permission to set the configuration of the object lambda enabled access point
Grants permission to associate an access policy with a specified access point
Grants permission to associate an access policy with a specified object lambda enabled access point
Grants permission to associate public access block configurations with a specified access point, while creating a access point
Grants permission to create or modify the PublicAccessBlock configuration for an AWS account
Grants permission to set an analytics configuration for the bucket, specified by the analytics configuration ID
Grants permission to set ABAC configuration for a general purpose bucket
Grants permission to set the permissions on an existing bucket using access control lists (ACLs)
Grants permission to set the CORS configuration for an Amazon S3 bucket
Grants permission to set the logging parameters for an Amazon S3 bucket
Grants permission to receive notifications when certain events happen in an Amazon S3 bucket
Grants permission to put Object Lock configuration on a specific bucket
Grants permission to add, replace or delete ownership controls on a bucket
Grants permission to add or replace a bucket policy on a bucket
Grants permission to create or modify the PublicAccessBlock configuration for a specific Amazon S3 bucket
Grants permission to set the request payment configuration of a bucket
Grants permission to add a set of tags to an existing Amazon S3 bucket
Grants permission to set the versioning state of an existing Amazon S3 bucket
Grants permission to set the configuration of the website that is specified in the website subresource
Grants permission to set the encryption configuration for an Amazon S3 bucket
Grants permission to create new or update or delete an existing Amazon S3 Intelligent Tiering configuration
Grants permission to add an inventory configuration to the bucket, identified by the inventory ID
Grants permission to replace tags on an existing Amazon S3 Batch Operations job
Grants permission to create a new lifecycle configuration for the bucket or replace an existing lifecycle configuration
Grants permission to set or update a metrics configuration for the CloudWatch request metrics from an Amazon S3 bucket
Grants permission to associate an access policy with a specified Multi-Region Access Point
Grants permission to add an object to a bucket
Grants permission to set the access control list (ACL) permissions for new or existing objects in an S3 bucket
Grants permission to add or replace an annotation on an object
Grants permission to apply a Legal Hold configuration to the specified object
Grants permission to place an Object Retention configuration on an object
Grants permission to set the supplied tag-set to an object that already exists in a bucket
Grants permission to use the acl subresource to set the access control list (ACL) permissions for an object that already exists in a bucket
Grants permission to add or replace an annotation on a specific version of an object
Grants permission to set the supplied tag-set for a specific version of an object
Grants permission to create a new replication configuration or replace an existing one
Grants permission to create or update an Amazon S3 Storage Lens configuration
Grants permission to put or replace tags on an existing Amazon S3 Storage Lens configuration
Grants permission to replicate delete markers to the destination bucket
Grants permission to replicate objects and object tags to the destination bucket
Grants permission to replicate annotations to the destination bucket
Grants permission to replicate object tags to the destination bucket
Grants permission to restore an archived copy of an object back into Amazon S3
Grants permission to submit a route configuration update for a Multi-Region Access Point
Grants permission to add tags to the specified resource
Grants permission to remove tags from the specified resource
Grants permission to update Access Grants location
Grants permission to update the annotation table configuration for a bucket
Grants permission to update the inventory table configuration on an existing S3 Metadata configuration for a specified general purpose bucket
Grants permission to update the journal table configuration on an existing S3 Metadata configuration for a specified general purpose bucket
Grants permission to update the priority of an existing job
Grants permission to update the status for the specified job
Grants permission to update the server-side encryption type of an existing object in a general purpose bucket
Grants permission to update an existing S3 Storage Lens group