s3-object-lambda:PutObjectVersionAcl

Permissions management

s3-object-lambda:PutObjectVersionAcl is a Permissions management access-level action in the s3-object-lambda service. Grants permission to use the acl subresource to set the access control list (ACL) permissions for an object that already exists in a bucket

Resource types

ARNs that s3-object-lambda:PutObjectVersionAcl can be scoped to in an IAM policy.

arn:${Partition}:s3-object-lambda:${Region}:${Account}:accesspoint/${AccessPointName}
objectlambdaaccesspoint

Condition keys

No condition keys are documented for this action.

Example IAM policy

A minimal policy that allows s3-object-lambda:PutObjectVersionAcl. Replace "Resource": "*" with a specific ARN to follow least privilege.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "AllowS3objectlambdaPutObjectVersionAcl",
      "Effect": "Allow",
      "Action": "s3-object-lambda:PutObjectVersionAcl",
      "Resource": "*"
    }
  ]
}

Related actions in s3-object-lambda

s3-object-lambda:AbortMultipartUpload Write s3-object-lambda:DeleteObject Write s3-object-lambda:DeleteObjectTagging Tagging s3-object-lambda:DeleteObjectVersion Write s3-object-lambda:DeleteObjectVersionTagging Tagging s3-object-lambda:GetObject Read s3-object-lambda:GetObjectAcl Read s3-object-lambda:GetObjectLegalHold Read s3-object-lambda:GetObjectRetention Read s3-object-lambda:GetObjectTagging Read s3-object-lambda:GetObjectVersion Read s3-object-lambda:GetObjectVersionAcl Read

View all s3-object-lambda actions →