28 actions in the s3express service. Select an action to see its access level, resource ARNs, condition keys, and a copy-paste IAM policy.
Grants permission to create a new access point
Grants permission to create a new bucket
Grants permission to Create Session token which is used for object APIs such as PutObject, GetObject, etc
Grants permission to delete the access point named in the URI
Grants permission to delete the policy on a specified access point
Grants permission to delete the scope configuration on a specified access point
Grants permission to delete the bucket named in the URI
Grants permission to delete the policy on a specified bucket
Grants permission to return configuration information about the specified access point
Grants permission to return the access point policy associated with the specified access point
Grants permission to return the scope configuration associated with the specified access point
Grants permission to return the policy of the specified bucket
Grants permission to return the default encryption configuration for a directory bucket
Grants permission to return an inventory configuration identified by the inventory configuration ID for a S3 directory bucket
Grants permission to return the lifecycle configuration information set on a directory bucket
Grants permission to get a metrics configuration of a directory bucket
Grants permission to list access points
Grants permission to list all directory buckets owned by the authenticated sender of the request
Grants permission to lists all of the tags for a specified resource
Grants permission to associate an access policy with a specified access point
Grants permission to associate an access point with a specified access point scope configuration
Grants permission to add or replace a bucket policy on a bucket
Grants permission to set the encryption configuration for a directory bucket
Grants permission to add an inventory configuration to the bucket, identified by the inventory ID
Grants permission to create a new lifecycle configuration for the directory bucket or replace an existing lifecycle configuration
Grants permission to set or update a metrics configuration for the CloudWatch request metrics of a directory bucket
Grants permission to create a new user-defined tag or update an existing tag
Grants permission to remove the specified user-defined tags from an S3 resource