S3 Express
Prefix s3express, 28 actions · Domain Storage
2 AWS managed policies. 0 have reviewed guidance; the rest have authoritative permission data pending editorial review.
User access (1)
Operator and limited (1)
- AmazonS3ExpressReadOnlyAccessOperator
Also grants S3 Express actions (17)
- AccessAnalyzerServiceRolePolicy
- AdministratorAccess
- AIDevOpsAgentActionsPolicy
- AmazonSageMakerFullAccess
- AssuranceServiceRolePolicy
- AWS_ConfigRole
- AWSCODAPermissionsBoundary
- AWSConfigServiceRolePolicy
- AWSMcpServiceActionsFullAccess
- AWSPartnerLedSupportReadOnlyAccess
- AWSResourceExplorerServiceRolePolicy
- AWSSupportServiceRolePolicy
- AWSWellArchitectedAgentResourceScanningServiceRolePolicy
- PowerUserAccess
- ReadOnlyAccess
- SecurityAudit
- WellArchitectedAgentResourceScanning
createaccesspoint createbucket createsession deleteaccesspoint deleteaccesspointpolicy deleteaccesspointscope deletebucket deletebucketpolicy getaccesspoint getaccesspointpolicy getaccesspointscope getbucketpolicy getencryptionconfiguration getinventoryconfiguration getlifecycleconfiguration getmetricsconfiguration listaccesspointsfordirectorybuckets listallmydirectorybuckets listtagsforresource putaccesspointpolicy putaccesspointscope putbucketpolicy putencryptionconfiguration putinventoryconfiguration putlifecycleconfiguration putmetricsconfiguration tagresource untagresource
Actions (28)
| Action | Access level | Policies granting without limits | Policies granting with resource or condition limits |
|---|---|---|---|
| s3express:CreateAccessPoint | Write | 5 | 1 |
| s3express:CreateBucket | Write | 5 | 2 |
| s3express:CreateSession | Write | 5 | 4 |
| s3express:DeleteAccessPoint | Write | 5 | 1 |
| s3express:DeleteAccessPointPolicy | Permissions management | 5 | 1 |
| s3express:DeleteAccessPointScope | Permissions management | 5 | 1 |
| s3express:DeleteBucket | Write | 5 | 1 |
| s3express:DeleteBucketPolicy | Permissions management | 5 | 1 |
| s3express:GetAccessPoint | Read | 12 | 2 |
| s3express:GetAccessPointPolicy | Read | 12 | 2 |
| s3express:GetAccessPointScope | Read | 11 | 2 |
| s3express:GetBucketPolicy | Read | 15 | 3 |
| s3express:GetEncryptionConfiguration | Read | 12 | 3 |
| s3express:GetInventoryConfiguration | Read | 7 | 3 |
| s3express:GetLifecycleConfiguration | Read | 11 | 3 |
| s3express:GetMetricsConfiguration | Read | 9 | 3 |
| s3express:ListAccessPointsForDirectoryBuckets | List | 12 | 2 |
| s3express:ListAllMyDirectoryBuckets | List | 16 | 3 |
| s3express:ListTagsForResource | List | 11 | 3 |
| s3express:PutAccessPointPolicy | Permissions management | 5 | 1 |
| s3express:PutAccessPointScope | Permissions management | 5 | 1 |
| s3express:PutBucketPolicy | Permissions management | 5 | 1 |
| s3express:PutEncryptionConfiguration | Write | 5 | 1 |
| s3express:PutInventoryConfiguration | Write | 5 | 1 |
| s3express:PutLifecycleConfiguration | Write | 5 | 1 |
| s3express:PutMetricsConfiguration | Write | 5 | 1 |
| s3express:TagResource | Tagging | 5 | 1 |
| s3express:UntagResource | Tagging | 5 | 1 |