Amazon S3
(s3)
IAM Changes
Services
2025-08-02
2025-08-02
1 new condition | 34 updated actions
Additions
Conditions
s3:AccessPointTag/${TagKey}
Description:
Filters access by existing access point tag key and value
Type:
String
Updates
Actions
AbortMultipartUpload
Conditions
+ s3:AccessPointTag/${TagKey}
+ aws:ResourceTag/${TagKey}
CreateAccessPoint
Conditions
+ s3:AccessPointTag/${TagKey}
+ aws:RequestTag/${TagKey}
+ aws:ResourceTag/${TagKey}
+ aws:TagKeys
DeleteAccessPoint
Conditions
+ s3:AccessPointTag/${TagKey}
+ aws:ResourceTag/${TagKey}
DeleteAccessPointPolicy
Conditions
+ s3:AccessPointTag/${TagKey}
+ aws:ResourceTag/${TagKey}
DeleteObject
Conditions
+ s3:AccessPointTag/${TagKey}
+ aws:ResourceTag/${TagKey}
DeleteObjectTagging
Conditions
+ s3:AccessPointTag/${TagKey}
+ aws:ResourceTag/${TagKey}
GetAccessPoint
Conditions
+ s3:AccessPointTag/${TagKey}
+ aws:ResourceTag/${TagKey}
GetAccessPointPolicy
Conditions
+ s3:AccessPointTag/${TagKey}
+ aws:ResourceTag/${TagKey}
GetAccessPointPolicyStatus
Conditions
+ s3:AccessPointTag/${TagKey}
+ aws:ResourceTag/${TagKey}
GetBucketAcl
Conditions
+ s3:AccessPointTag/${TagKey}
+ aws:ResourceTag/${TagKey}
GetBucketCORS
Conditions
+ s3:AccessPointTag/${TagKey}
+ aws:ResourceTag/${TagKey}
GetBucketLocation
Conditions
+ s3:AccessPointTag/${TagKey}
+ aws:ResourceTag/${TagKey}
GetBucketNotification
Conditions
+ s3:AccessPointTag/${TagKey}
+ aws:ResourceTag/${TagKey}
GetBucketPolicy
Conditions
+ s3:AccessPointTag/${TagKey}
+ aws:ResourceTag/${TagKey}
GetObject
Conditions
+ s3:AccessPointTag/${TagKey}
+ aws:ResourceTag/${TagKey}
GetObjectAcl
Conditions
+ s3:AccessPointTag/${TagKey}
+ aws:ResourceTag/${TagKey}
GetObjectAttributes
Conditions
+ s3:AccessPointTag/${TagKey}
+ aws:ResourceTag/${TagKey}
GetObjectLegalHold
Conditions
+ s3:AccessPointTag/${TagKey}
+ aws:ResourceTag/${TagKey}
GetObjectRetention
Conditions
+ s3:AccessPointTag/${TagKey}
+ aws:ResourceTag/${TagKey}
GetObjectTagging
Conditions
+ s3:AccessPointTag/${TagKey}
+ aws:ResourceTag/${TagKey}
ListBucket
Conditions
+ s3:AccessPointTag/${TagKey}
+ aws:ResourceTag/${TagKey}
ListBucketMultipartUploads
Conditions
+ s3:AccessPointTag/${TagKey}
+ aws:ResourceTag/${TagKey}
ListBucketVersions
Conditions
+ s3:AccessPointTag/${TagKey}
+ aws:ResourceTag/${TagKey}
ListMultipartUploadParts
Conditions
+ s3:AccessPointTag/${TagKey}
+ aws:ResourceTag/${TagKey}
ListTagsForResource
Resources
+ accesspoint
PutAccessPointPolicy
Conditions
+ s3:AccessPointTag/${TagKey}
+ aws:ResourceTag/${TagKey}
PutObject
Conditions
+ s3:AccessPointTag/${TagKey}
+ aws:ResourceTag/${TagKey}
PutObjectAcl
Conditions
+ s3:AccessPointTag/${TagKey}
+ aws:ResourceTag/${TagKey}
PutObjectLegalHold
Conditions
+ s3:AccessPointTag/${TagKey}
+ aws:ResourceTag/${TagKey}
PutObjectRetention
Conditions
+ s3:AccessPointTag/${TagKey}
+ aws:ResourceTag/${TagKey}
PutObjectTagging
Conditions
+ s3:AccessPointTag/${TagKey}
+ aws:ResourceTag/${TagKey}
RestoreObject
Conditions
+ s3:AccessPointTag/${TagKey}
+ aws:ResourceTag/${TagKey}
TagResource
Resources
+ accesspoint
UntagResource
Resources
+ accesspoint