Amazon S3 (s3)

Additions

Actions

• AllowVendedLogDeliveryForResource
  
  • Description:  Grants permission to configure server access logs delivery to CloudWatch
  • Access:  Read
  • Resources: 

    Name: bucket

    Required: Yes

  • Conditions: 

    s3:resourceArnBeingAuthorized

    s3:deliverySourceArn

    s3:logType

Conditions

• s3:deliverySourceArn
  
  • Description:  Filters access by specific delivery source Amazon Resource Name (ARN)
  • Type:  ARN
• s3:logType
  
  • Description:  Filters access by specific log type, currently supports S3_SERVER_ACCESS_LOGS
  • Type:  String
• s3:resourceArnBeingAuthorized
  
  • Description:  Filters access by source bucket Amazon Resource Name (ARN)
  • Type:  ARN