s3:DeleteObjectVersionAnnotation is a Write access-level action in the s3 service. Grants permission to delete an annotation from a specific version of an object
ARNs that s3:DeleteObjectVersionAnnotation can be scoped to in an IAM policy.
Keys you can use in the Condition block of a policy that grants s3:DeleteObjectVersionAnnotation.
Filters access by the tags associated with the resource
Filters access by the network origin (Internet or VPC)
Filters access by existing access point tag key and value
Filters access by the tags associated with the bucket
Filters access by the AWS Account ID that owns the access point
Filters access by an access point Amazon Resource Name (ARN)
A minimal policy that allows s3:DeleteObjectVersionAnnotation. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowS3DeleteObjectVersionAnnotation",
"Effect": "Allow",
"Action": "s3:DeleteObjectVersionAnnotation",
"Resource": "*"
}
]
}