s3-outposts:DeleteAccessPointPolicy

Permissions management

s3-outposts:DeleteAccessPointPolicy is a Permissions management access-level action in the s3-outposts service. Grants permission to delete the policy on a specified access point

Resource types

ARNs that s3-outposts:DeleteAccessPointPolicy can be scoped to in an IAM policy.

arn:${Partition}:s3-outposts:${Region}:${Account}:outpost/${OutpostId}/accesspoint/${AccessPointName} required
accesspoint

Condition keys

Keys you can use in the Condition block of a policy that grants s3-outposts:DeleteAccessPointPolicy.

s3-outposts:AccessPointNetworkOrigin String

Filters access by the network origin (Internet or VPC)

s3-outposts:DataAccessPointAccount String

Filters access by the AWS Account ID that owns the access point

s3-outposts:DataAccessPointArn ARN

Filters access by an access point Amazon Resource Name (ARN)

s3-outposts:authType String

Filters access by restricting incoming requests to a specific authentication method

s3-outposts:signatureAge Numeric

Filters access by identifying the length of time, in milliseconds, that a signature is valid in an authenticated request

s3-outposts:signatureversion String

Filters access by identifying the version of AWS Signature that is supported for authenticated requests

s3-outposts:x-amz-content-sha256 String

Filters access by disallowing unsigned content in your bucket

Example IAM policy

A minimal policy that allows s3-outposts:DeleteAccessPointPolicy. Replace "Resource": "*" with a specific ARN to follow least privilege.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "AllowS3outpostsDeleteAccessPointPolicy",
      "Effect": "Allow",
      "Action": "s3-outposts:DeleteAccessPointPolicy",
      "Resource": "*"
    }
  ]
}

Related actions in s3-outposts

View all s3-outposts actions →