s3:CreateBucket is a Write access-level action in the s3 service. Grants permission to create a new bucket
ARNs that s3:CreateBucket can be scoped to in an IAM policy.
Keys you can use in the Condition block of a policy that grants s3:CreateBucket.
Filters access by the tags that are passed in the request
Filters access by the tag keys that are passed in the request
Filters access by the resource owner AWS account ID
Filters access by the TLS version used by the client
Filters access by authentication method
Filters access by a specific Region
Filters access by the age in milliseconds of the request signature
Filters access by the version of AWS Signature used on the request
Filters access by canned ACL in the request's x-amz-acl header
Filters access by general purpose bucket namespace type
Filters access by unsigned content in your bucket
Filters access by x-amz-grant-full-control (full control) header
Filters access by x-amz-grant-read (read access) header
Filters access by the x-amz-grant-read-acp (read permissions for the ACL) header
Filters access by the x-amz-grant-write (write access) header
Filters access by the x-amz-grant-write-acp (write permissions for the ACL) header
Filters access by Object Ownership
Filters access by the tags associated with the resource
Filters access by the tags associated with the bucket
A minimal policy that allows s3:CreateBucket. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowS3CreateBucket",
"Effect": "Allow",
"Action": "s3:CreateBucket",
"Resource": "*"
}
]
}