Amazon S3 (s3)

Additions

Actions

• CreateStorageLensGroup
  
  • Description:  Grants permission to create an Amazon S3 Storage Lens group
  • Access:  Write
  • Conditions: 

    s3:authType

    s3:ResourceAccount

    s3:signatureAge

    s3:signatureversion

    s3:TlsVersion

    s3:x-amz-content-sha256

    aws:RequestTag/${TagKey}

    aws:TagKeys

• DeleteStorageLensGroup
  
  • Description:  Grants permission to delete an existing S3 Storage Lens group
  • Access:  Write
  • Resources: 

    Name: storagelensgroup

    Required: Yes

  • Conditions: 

    s3:authType

    s3:ResourceAccount

    s3:signatureAge

    s3:signatureversion

    s3:TlsVersion

    s3:x-amz-content-sha256

• GetStorageLensGroup
  
  • Description:  Grants permission to get an Amazon S3 Storage Lens group
  • Access:  Read
  • Resources: 

    Name: storagelensgroup

    Required: Yes

  • Conditions: 

    s3:authType

    s3:ResourceAccount

    s3:signatureAge

    s3:signatureversion

    s3:TlsVersion

    s3:x-amz-content-sha256

• ListStorageLensGroups
  
  • Description:  Grants permission to list S3 Storage Lens groups
  • Access:  List
  • Conditions: 

    s3:authType

    s3:ResourceAccount

    s3:signatureAge

    s3:signatureversion

    s3:TlsVersion

    s3:x-amz-content-sha256

• ListTagsForResource
  
  • Description:  Grants permission to list the tags attached to the specified resource
  • Access:  List
  • Resources: 

    Name: storagelensgroup

    Required: No

  • Conditions: 

    s3:authType

    s3:ResourceAccount

    s3:signatureAge

    s3:signatureversion

    s3:TlsVersion

    s3:x-amz-content-sha256

• TagResource
  
  • Description:  Grants permission to add tags to the specified resource
  • Access:  Tagging
  • Resources: 

    Name: storagelensgroup

    Required: No

  • Conditions: 

    s3:authType

    s3:ResourceAccount

    s3:signatureAge

    s3:signatureversion

    s3:TlsVersion

    s3:x-amz-content-sha256

    aws:TagKeys

    aws:RequestTag/${TagKey}

• UntagResource
  
  • Description:  Grants permission to remove tags from the specified resource
  • Access:  Tagging
  • Resources: 

    Name: storagelensgroup

    Required: No

  • Conditions: 

    s3:authType

    s3:ResourceAccount

    s3:signatureAge

    s3:signatureversion

    s3:TlsVersion

    s3:x-amz-content-sha256

    aws:TagKeys

• UpdateStorageLensGroup
  
  • Description:  Grants permission to update an existing S3 Storage Lens group
  • Access:  Write
  • Resources: 

    Name: storagelensgroup

    Required: Yes

  • Conditions: 

    s3:authType

    s3:ResourceAccount

    s3:signatureAge

    s3:signatureversion

    s3:TlsVersion

    s3:x-amz-content-sha256

Resources

• storagelensgroup
  
  • Arn:  arn:${Partition}:s3:${Region}:${Account}:storage-lens-group/${Name}
  • Conditions: 

    aws:ResourceTag/${TagKey}