Amazon S3 on Outposts (s3-outposts)

Additions

Actions

• GetObjectVersionForReplication
  
  • Description:  Grants permission to replicate both unencrypted objects and objects encrypted with SSE-KMS
  • Access:  Read
  • Resources: 

    Name: object

    Required: Yes

  • Conditions: 

    s3-outposts:authType

    s3-outposts:signatureAge

    s3-outposts:signatureversion

    s3-outposts:x-amz-content-sha256

• GetReplicationConfiguration
  
  • Description:  Grants permission to get the replication configuration information set on an Amazon S3 bucket
  • Access:  Read
  • Resources: 

    Name: bucket

    Required: Yes

  • Conditions: 

    s3-outposts:authType

    s3-outposts:signatureAge

    s3-outposts:signatureversion

    s3-outposts:x-amz-content-sha256

• PutReplicationConfiguration
  
  • Description:  Grants permission to create a new replication configuration or replace an existing one
  • Access:  Write
  • Resources: 

    Name: bucket

    Required: Yes

  • Conditions: 

    s3-outposts:authType

    s3-outposts:signatureAge

    s3-outposts:signatureversion

    s3-outposts:x-amz-content-sha256

  • Dependents: 

    iam:PassRole

• ReplicateDelete
  
  • Description:  Grants permission to replicate delete markers to the destination bucket
  • Access:  Write
  • Resources: 

    Name: object

    Required: Yes

  • Conditions: 

    s3-outposts:authType

    s3-outposts:signatureAge

    s3-outposts:signatureversion

    s3-outposts:x-amz-content-sha256

• ReplicateObject
  
  • Description:  Grants permission to replicate objects and object tags to the destination bucket
  • Access:  Write
  • Resources: 

    Name: object

    Required: Yes

  • Conditions: 

    s3-outposts:authType

    s3-outposts:signatureAge

    s3-outposts:signatureversion

    s3-outposts:x-amz-content-sha256

    s3-outposts:x-amz-server-side-encryption

• ReplicateTags
  
  • Description:  Grants permission to replicate object tags to the destination bucket
  • Access:  Tagging
  • Resources: 

    Name: object

    Required: Yes

  • Conditions: 

    s3-outposts:authType

    s3-outposts:signatureAge

    s3-outposts:signatureversion

    s3-outposts:x-amz-content-sha256