s3express:ListAccessPointsForDirectoryBuckets is a List access-level action in the s3express service. Grants permission to list access points
This action does not support resource-level permissions; use "Resource": "*" in your policy.
Keys you can use in the Condition block of a policy that grants s3express:ListAccessPointsForDirectoryBuckets.
Filters access by the resource owner AWS account ID
Filters access by the TLS version used by the client
Filters access by authentication method
Filters access by the AWS Signature Version used on the request
Filters access by unsigned content in your bucket
A minimal policy that allows s3express:ListAccessPointsForDirectoryBuckets. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowS3expressListAccessPointsForDirectoryBuckets",
"Effect": "Allow",
"Action": "s3express:ListAccessPointsForDirectoryBuckets",
"Resource": "*"
}
]
}