Amazon S3 Express (s3express)

Additions

Actions

• GetEncryptionConfiguration
  
  • Description:  Grants permission to return the default encryption configuration for a directory bucket
  • Access:  Read
  • Resources: 

    Name: bucket

    Required: Yes

  • Conditions: 

    s3express:authType

    s3express:ResourceAccount

    s3express:signatureversion

    s3express:TlsVersion

    s3express:x-amz-content-sha256

• PutEncryptionConfiguration
  
  • Description:  Grants permission to set the encryption configuration for a directory bucket
  • Access:  Write
  • Resources: 

    Name: bucket

    Required: Yes

  • Conditions: 

    s3express:authType

    s3express:ResourceAccount

    s3express:signatureversion

    s3express:TlsVersion

    s3express:x-amz-content-sha256

Conditions

• s3express:x-amz-server-side-encryption
  
  • Description:  Filters access by server-side encryption
  • Type:  String
• s3express:x-amz-server-side-encryption-aws-kms-key-id
  
  • Description:  Filters access by AWS KMS customer managed key for server-side encryption
  • Type:  ARN

Updates

Actions

• CreateBucket
  
  Conditions
  
  • ＋ s3express:x-amz-server-side-encryption
  • ＋ s3express:x-amz-server-side-encryption-aws-kms-key-id