Amazon S3 Express (s3express)

2025-07-04

3 new actions, 4 new conditions | 2 updated actions, 1 updated resource

Additions

    Actions
  • ListTagsForResource
    • Description:  Grants permission to lists all of the tags for a specified resource
    • Access:  List
    • Resources: 

      Name: bucket

      Required: Yes

    • Conditions: 

      s3express:authType

      s3express:ResourceAccount

      s3express:signatureversion

      s3express:TlsVersion

      s3express:x-amz-content-sha256
  • TagResource
    • Description:  Grants permission to create a new user-defined tag or update an existing tag
    • Access:  Tagging
    • Resources: 

      Name: bucket

      Required: Yes

    • Conditions: 

      s3express:authType

      s3express:ResourceAccount

      s3express:signatureversion

      s3express:TlsVersion

      s3express:x-amz-content-sha256

      aws:RequestTag/${TagKey}

      aws:TagKeys
  • UntagResource
    • Description:  Grants permission to remove the specified user-defined tags from an S3 resource
    • Access:  Tagging
    • Resources: 

      Name: bucket

      Required: Yes

    • Conditions: 

      s3express:authType

      s3express:ResourceAccount

      s3express:signatureversion

      s3express:TlsVersion

      s3express:x-amz-content-sha256

      aws:TagKeys
    Conditions
  • aws:RequestTag/${TagKey}
    • Description:  Filters access by the tags that are passed in the request
    • Type:  String
  • aws:ResourceTag/${TagKey}
    • Description:  Filters access by the tags associated with the resource
    • Type:  String
  • aws:TagKeys
    • Description:  Filters access by the tag keys that are passed in the request
    • Type:  ArrayOfString
  • s3express:BucketTag/${TagKey}
    • Description:  Filters access by tag key-value pairs attached to the bucket
    • Type:  String

Updates

    Resources
  • bucket
      Conditions
    • ＋ aws:ResourceTag/${TagKey}
    • ＋ s3express:BucketTag/${TagKey}