s3-outposts:PutObject is a Write access-level action in the s3-outposts service. Grants permission to add an object to a bucket
ARNs that s3-outposts:PutObject can be scoped to in an IAM policy.
Keys you can use in the Condition block of a policy that grants s3-outposts:PutObject.
Filters access by the network origin (Internet or VPC)
Filters access by the AWS Account ID that owns the access point
Filters access by an access point Amazon Resource Name (ARN)
Filters access by restricting the tag keys and values allowed on objects
Filters access by restricting the tag keys allowed on objects
Filters access by restricting incoming requests to a specific authentication method
Filters access by identifying the length of time, in milliseconds, that a signature is valid in an authenticated request
Filters access by identifying the version of AWS Signature that is supported for authenticated requests
Filters access by requiring the x-amz-acl header with a specific canned ACL in a request
Filters access by disallowing unsigned content in your bucket
Filters access by restricting the copy source to a specific bucket, prefix, or object
Filters access by enabling enforcement of object metadata behavior (COPY or REPLACE) when objects are copied
Filters access by requiring server-side encryption
Filters access by storage class
A minimal policy that allows s3-outposts:PutObject. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowS3outpostsPutObject",
"Effect": "Allow",
"Action": "s3-outposts:PutObject",
"Resource": "*"
}
]
}