s3:CreateAccessPointForObjectLambda is a Write access-level action in the s3 service. Grants permission to create an object lambda enabled accesspoint
ARNs that s3:CreateAccessPointForObjectLambda can be scoped to in an IAM policy.
Keys you can use in the Condition block of a policy that grants s3:CreateAccessPointForObjectLambda.
Filters access by the network origin (Internet or VPC)
Filters access by the AWS Account ID that owns the access point
Filters access by an access point Amazon Resource Name (ARN)
Filters access by the resource owner AWS account ID
Filters access by the TLS version used by the client
Filters access by authentication method
Filters access by the age in milliseconds of the request signature
Filters access by the version of AWS Signature used on the request
Filters access by unsigned content in your bucket
A minimal policy that allows s3:CreateAccessPointForObjectLambda. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowS3CreateAccessPointForObjectLambda",
"Effect": "Allow",
"Action": "s3:CreateAccessPointForObjectLambda",
"Resource": "*"
}
]
}