s3tables:ListTagsForResource

List

s3tables:ListTagsForResource is a List access-level action in the s3tables service. Grants permission to list the tags for an S3 Tables resource

Resource types

ARNs that s3tables:ListTagsForResource can be scoped to in an IAM policy.

arn:${Partition}:s3tables:${Region}:${Account}:bucket/${TableBucketName}/table/${TableID}

Table

arn:${Partition}:s3tables:${Region}:${Account}:bucket/${TableBucketName}

TableBucket

Condition keys

Keys you can use in the Condition block of a policy that grants s3tables:ListTagsForResource.

aws:ResourceTag/${TagKey} String

Filters access by the tags associated with the resource

s3tables:TableBucketTag/${TagKey} String

Filters access by the tags associated with the table bucket

s3tables:namespace String

Filters access by the namespaces created in the table bucket

s3tables:tableName String

Filters access by the name of the tables in the table bucket

Example IAM policy

A minimal policy that allows s3tables:ListTagsForResource. Replace "Resource": "*" with a specific ARN to follow least privilege.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "AllowS3tablesListTagsForResource",
      "Effect": "Allow",
      "Action": "s3tables:ListTagsForResource",
      "Resource": "*"
    }
  ]
}

Related actions in s3tables

s3tables:CreateNamespace Write s3tables:CreateTable Write s3tables:CreateTableBucket Write s3tables:DeleteNamespace Write s3tables:DeleteTable Write s3tables:DeleteTableBucket Write s3tables:DeleteTableBucketEncryption Write s3tables:DeleteTableBucketMetricsConfiguration Write s3tables:DeleteTableBucketPolicy Permissions management s3tables:DeleteTableBucketReplication Write s3tables:DeleteTablePolicy Permissions management s3tables:DeleteTableReplication Write

View all s3tables actions →