本文属于机器翻译版本。若本译文内容与英语原文存在差异，则一律以英文原文为准。
# Amazon S3 的操作、资源和条件键
Amazon S3（服务前缀：`s3`）提供以下服务特定的资源、操作和条件上下文键以在 IAM 权限策略中使用。
参考：
+ 了解如何[配置该服务](https://docs.aws.amazon.com/AmazonS3/latest/userguide/Welcome.html)。
+ 查看[适用于该服务的 API 操作列表](https://docs.aws.amazon.com/AmazonS3/latest/API/)。
+ 了解如何[使用 IAM](https://docs.aws.amazon.com/AmazonS3/latest/userguide/access-control-overview.html) 权限策略保护该服务及其资源。
**Topics**
+ [Amazon S3 定义的操作](#amazons3-actions-as-permissions)
+ [Amazon S3 定义的资源类型](#amazons3-resources-for-iam-policies)
+ [Amazon S3 的条件键](#amazons3-policy-keys)
## Amazon S3 定义的操作
您可以在 IAM 策略语句的 `Action` 元素中指定以下操作。可以使用策略授予在 AWS中执行操作的权限。您在策略中使用一项操作时，通常使用相同的名称允许或拒绝对 API 操作或 CLI 命令的访问。但在某些情况下，单一动作可控制对多项操作的访问。还有某些操作需要多种不同的动作。
操作表的**访问级别**列描述如何对操作进行分类（列出、读取、权限管理或标记）。此分类可以帮助您了解当您在策略中使用操作时，相应操作授予的访问级别。有关访问级别的更多信息，请参阅[策略摘要中的访问级别](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_understand-policy-summary-access-level-summaries.html)。
操作表的**资源类型**列指示每项操作是否支持资源级权限。如果该列没有任何值，您必须在策略语句的 `Resource` 元素中指定策略应用的所有资源（“\*”）。通过在 IAM policy 中使用条件来筛选访问权限，以控制是否可以在资源或请求中使用特定标签键。如果操作具有一个或多个必需资源，则调用方必须具有使用这些资源来使用该操作的权限。必需资源在表中以星号 (\*) 表示。如果您在 IAM policy 中使用 `Resource` 元素限制资源访问权限，则必须为每种必需的资源类型添加 ARN 或模式。某些操作支持多种资源类型。如果资源类型是可选的（未指示为必需），则可以选择使用一种可选资源类型。
操作表的**条件键**列包括可以在策略语句的 `Condition` 元素中指定的键。有关与服务资源关联的条件键的更多信息，请参阅资源类型表的**条件键**列。
操作表的**依赖操作**列显示成功调用操作可能需要的其他权限。除了操作本身的权限以外，可能还需要这些权限。若某个操作指定依赖操作，则这些依赖关系可能适用于为该操作定义的其他资源，而不仅仅是表中列出的第一个资源。
**注意**
资源条件键在[资源类型](#amazons3-resources-for-iam-policies)表中列出。您可以在操作表的**资源类型（\* 为必需）**列中找到应用于某项操作的资源类型的链接。资源类型表中的资源类型包括**条件密钥**列，这是应用于操作表中操作的资源条件键。
有关下表中各列的详细信息，请参阅[操作表](reference_policies_actions-resources-contextkeys.html#actions_table)。
****
- ** [AbortMultipartUpload](https://docs.aws.amazon.com/AmazonS3/latest/API/API_AbortMultipartUpload.html) **
- **描述:** 授予权限以中止分段上传
- **访问级别:** 写入
- **资源类型（\* 为必需）:** [accesspointobject](#amazons3-accesspointobject) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** [object](#amazons3-object) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:AccessGrantsInstanceArn](#amazons3-s3_AccessGrantsInstanceArn)
[s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256) / **相关操作:**
- ** [AllowVendedLogDeliveryForResource](https://docs.aws.amazon.com/AmazonS3/latest/userguide/ServerLogs.html) **
- **描述:** 授予配置服务器访问日志传送到的权限 CloudWatch
- **访问级别:** 读取
- **资源类型（\* 为必需）:** [bucket\*](#amazons3-bucket) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:resourceArnBeingAuthorized](#amazons3-s3_resourceArnBeingAuthorized)
[s3:deliverySourceArn](#amazons3-s3_deliverySourceArn)
[s3:logType](#amazons3-s3_logType) / **相关操作:**
- ** [AssociateAccessGrantsIdentityCenter](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_AssociateAccessGrantsIdentityCenter.html) **
- **描述:** 授予关联 Access Grants 身份中心的权限
- **访问级别:** 权限管理
- **资源类型（\* 为必需）:** [accessgrantsinstance\*](#amazons3-accessgrantsinstance) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256)
[aws:ResourceTag/${TagKey}](#amazons3-aws_ResourceTag___TagKey_) / **相关操作:**
- ** [BypassGovernanceRetention](https://docs.aws.amazon.com/AmazonS3/latest/userguide/object-lock-managing.html#object-lock-managing-bypass) **
- **描述:** 授予权限以允许绕过监管模式对象保留设置
- **访问级别:** 权限管理
- **资源类型（\* 为必需）:** [accesspointobject](#amazons3-accesspointobject) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** [object](#amazons3-object) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:RequestObjectTag/](#amazons3-s3_RequestObjectTag_key)
[s3:RequestObjectTagKeys](#amazons3-s3_RequestObjectTagKeys)
[s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-acl](#amazons3-s3_x-amz-acl)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256)
[s3:x-amz-copy-source](#amazons3-s3_x-amz-copy-source)
[s3:x-amz-grant-full-control](#amazons3-s3_x-amz-grant-full-control)
[s3:x-amz-grant-read](#amazons3-s3_x-amz-grant-read)
[s3:x-amz-grant-read-acp](#amazons3-s3_x-amz-grant-read-acp)
[s3:x-amz-grant-write](#amazons3-s3_x-amz-grant-write)
[s3:x-amz-grant-write-acp](#amazons3-s3_x-amz-grant-write-acp)
[s3:x-amz-metadata-directive](#amazons3-s3_x-amz-metadata-directive)
[s3:x-amz-server-side-encryption](#amazons3-s3_x-amz-server-side-encryption)
[s3:x-amz-server-side-encryption-aws-kms-key-id](#amazons3-s3_x-amz-server-side-encryption-aws-kms-key-id)
[s3:x-amz-server-side-encryption-customer-algorithm](#amazons3-s3_x-amz-server-side-encryption-customer-algorithm)
[s3:x-amz-storage-class](#amazons3-s3_x-amz-storage-class)
[s3:x-amz-website-redirect-location](#amazons3-s3_x-amz-website-redirect-location) / **相关操作:**
- ** [CreateAccessGrant](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_CreateAccessGrant.html) **
- **描述:** 授予创建访问授权的权限
- **访问级别:** 权限管理
- **资源类型（\* 为必需）:** [accessgrantslocation\*](#amazons3-accessgrantslocation) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:AccessGrantScope](#amazons3-s3_AccessGrantScope)
[s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256)
[aws:ResourceTag/${TagKey}](#amazons3-aws_ResourceTag___TagKey_)
[aws:RequestTag/${TagKey}](#amazons3-aws_RequestTag___TagKey_)
[aws:TagKeys](#amazons3-aws_TagKeys) / **相关操作:**
- ** [CreateAccessGrantsInstance](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_CreateAccessGrantsInstance.html) **
- **描述:** 授予创建 Access Grants 实例的权限
- **访问级别:** 权限管理
- **资源类型（\* 为必需）:** [accessgrantsinstance\*](#amazons3-accessgrantsinstance) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256)
[aws:RequestTag/${TagKey}](#amazons3-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#amazons3-aws_ResourceTag___TagKey_)
[aws:TagKeys](#amazons3-aws_TagKeys) / **相关操作:**
- ** [CreateAccessGrantsLocation](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_CreateAccessGrantsLocation.html) **
- **描述:** 授予创建 Access Grants 位置的权限
- **访问级别:** 权限管理
- **资源类型（\* 为必需）:** [accessgrantsinstance\*](#amazons3-accessgrantsinstance) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:AccessGrantsLocationScope](#amazons3-s3_AccessGrantsLocationScope)
[s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256)
[aws:ResourceTag/${TagKey}](#amazons3-aws_ResourceTag___TagKey_)
[aws:RequestTag/${TagKey}](#amazons3-aws_RequestTag___TagKey_)
[aws:TagKeys](#amazons3-aws_TagKeys) / **相关操作:**
- ** [CreateAccessPoint](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_CreateAccessPoint.html) **
- **描述:** 授予权限以创建新的接入点
- **访问级别:** 写入
- **资源类型（\* 为必需）:** [accesspoint\*](#amazons3-accesspoint) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:DataAccessPointAccount](#amazons3-s3_DataAccessPointAccount)
[s3:DataAccessPointArn](#amazons3-s3_DataAccessPointArn)
[s3:AccessPointNetworkOrigin](#amazons3-s3_AccessPointNetworkOrigin)
[s3:authType](#amazons3-s3_authType)
[s3:locationconstraint](#amazons3-s3_locationconstraint)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-acl](#amazons3-s3_x-amz-acl)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256)
[s3:AccessPointTag/${TagKey}](#amazons3-s3_AccessPointTag___TagKey_)
[aws:RequestTag/${TagKey}](#amazons3-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#amazons3-aws_ResourceTag___TagKey_)
[aws:TagKeys](#amazons3-aws_TagKeys) / **相关操作:**
- ** [CreateAccessPointForObjectLambda](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_CreateAccessPointForObjectLambda.html) **
- **描述:** 授予权限以创建对象 lambda 接入点
- **访问级别:** 写入
- **资源类型（\* 为必需）:** [objectlambdaaccesspoint\*](#amazons3-objectlambdaaccesspoint) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:DataAccessPointAccount](#amazons3-s3_DataAccessPointAccount)
[s3:DataAccessPointArn](#amazons3-s3_DataAccessPointArn)
[s3:AccessPointNetworkOrigin](#amazons3-s3_AccessPointNetworkOrigin)
[s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256) / **相关操作:**
- ** [CreateBucket](https://docs.aws.amazon.com/AmazonS3/latest/API/API_CreateBucket.html) **
- **描述:** 授予权限以创建新的存储桶
- **访问级别:** 写入
- **资源类型（\* 为必需）:** [bucket\*](#amazons3-bucket) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:locationconstraint](#amazons3-s3_locationconstraint)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-acl](#amazons3-s3_x-amz-acl)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256)
[s3:x-amz-grant-full-control](#amazons3-s3_x-amz-grant-full-control)
[s3:x-amz-grant-read](#amazons3-s3_x-amz-grant-read)
[s3:x-amz-grant-read-acp](#amazons3-s3_x-amz-grant-read-acp)
[s3:x-amz-grant-write](#amazons3-s3_x-amz-grant-write)
[s3:x-amz-grant-write-acp](#amazons3-s3_x-amz-grant-write-acp)
[s3:x-amz-bucket-namespace](#amazons3-s3_x-amz-bucket-namespace)
[s3:x-amz-object-ownership](#amazons3-s3_x-amz-object-ownership)
[aws:RequestTag/${TagKey}](#amazons3-aws_RequestTag___TagKey_)
[aws:TagKeys](#amazons3-aws_TagKeys) / **相关操作:**
- ** [CreateBucketMetadataTableConfiguration](https://docs.aws.amazon.com/AmazonS3/latest/API/API_CreateBucketMetadataConfiguration.html) **
- **描述:** 授予权限以为指定的通用存储桶创建新的 S3 元数据配置
- **访问级别:** 写入
- **资源类型（\* 为必需）:** [bucket\*](#amazons3-bucket) / **条件键:** / **相关操作:** kms:DescribeKey
s3tables:CreateNamespace
s3tables:CreateTable
s3tables:CreateTableBucket
s3tables:GetTable
s3tables:PutTableBucketPolicy
s3tables:PutTableEncryption
s3tables:PutTablePolicy
- **资源类型（\* 为必需）:** / **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256) / **相关操作:**
- ** [CreateJob](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_CreateJob.html) **
- **描述:** 授予权限以创建新的 Amazon S3 批量操作作业
- **访问级别:** 写入
- **资源类型（\* 为必需）:**
- **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256)
[s3:RequestJobPriority](#amazons3-s3_RequestJobPriority)
[s3:RequestJobOperation](#amazons3-s3_RequestJobOperation)
[aws:TagKeys](#amazons3-aws_TagKeys)
[aws:RequestTag/${TagKey}](#amazons3-aws_RequestTag___TagKey_)
- **相关操作:** iam:PassRole
- ** [CreateMultiRegionAccessPoint](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_CreateMultiRegionAccessPoint.html) **
- **描述:** 授予创建新 Multi-Region 接入点的权限
- **访问级别:** 写入
- **资源类型（\* 为必需）:** [multiregionaccesspoint\*](#amazons3-multiregionaccesspoint) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:DataAccessPointAccount](#amazons3-s3_DataAccessPointAccount)
[s3:DataAccessPointArn](#amazons3-s3_DataAccessPointArn)
[s3:AccessPointNetworkOrigin](#amazons3-s3_AccessPointNetworkOrigin)
[s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:TlsVersion](#amazons3-s3_TlsVersion) / **相关操作:**
- ** [CreateStorageLensGroup](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_CreateStorageLensGroup.html) **
- **描述:** 授予创建 Amazon S3 Storage Lens 存储统计管理工具组的权限
- **访问级别:** 写入
- **资源类型（\* 为必需）:**
- **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256)
[aws:RequestTag/${TagKey}](#amazons3-aws_RequestTag___TagKey_)
[aws:TagKeys](#amazons3-aws_TagKeys)
- **相关操作:**
- ** [DeleteAccessGrant](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_DeleteAccessGrant.html) **
- **描述:** 授予删除访问授权的权限
- **访问级别:** 权限管理
- **资源类型（\* 为必需）:** [accessgrant\*](#amazons3-accessgrant) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:AccessGrantScope](#amazons3-s3_AccessGrantScope)
[s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256)
[aws:ResourceTag/${TagKey}](#amazons3-aws_ResourceTag___TagKey_) / **相关操作:**
- ** [DeleteAccessGrantsInstance](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_DeleteAccessGrantsInstance.html) **
- **描述:** 授予删除 Access Grants 实例的权限
- **访问级别:** 权限管理
- **资源类型（\* 为必需）:** [accessgrantsinstance\*](#amazons3-accessgrantsinstance) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256)
[aws:ResourceTag/${TagKey}](#amazons3-aws_ResourceTag___TagKey_) / **相关操作:**
- ** [DeleteAccessGrantsInstanceResourcePolicy](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_DeleteAccessGrantsInstanceResourcePolicy.html) **
- **描述:** 授予读取 Access Grants 实例资源策略的权限
- **访问级别:** 权限管理
- **资源类型（\* 为必需）:** [accessgrantsinstance\*](#amazons3-accessgrantsinstance) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256)
[aws:ResourceTag/${TagKey}](#amazons3-aws_ResourceTag___TagKey_) / **相关操作:**
- ** [DeleteAccessGrantsLocation](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_DeleteAccessGrantsLocation.html) **
- **描述:** 授予删除 Access Grants 位置的权限
- **访问级别:** 权限管理
- **资源类型（\* 为必需）:** [accessgrantslocation\*](#amazons3-accessgrantslocation) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:AccessGrantsLocationScope](#amazons3-s3_AccessGrantsLocationScope)
[s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256)
[aws:ResourceTag/${TagKey}](#amazons3-aws_ResourceTag___TagKey_) / **相关操作:**
- ** [DeleteAccessPoint](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_DeleteAccessPoint.html) **
- **描述:** 授予权限以删除在 URI 中指定的接入点
- **访问级别:** 写入
- **资源类型（\* 为必需）:** [accesspoint\*](#amazons3-accesspoint) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:DataAccessPointArn](#amazons3-s3_DataAccessPointArn)
[s3:DataAccessPointAccount](#amazons3-s3_DataAccessPointAccount)
[s3:AccessPointNetworkOrigin](#amazons3-s3_AccessPointNetworkOrigin)
[s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256)
[s3:AccessPointTag/${TagKey}](#amazons3-s3_AccessPointTag___TagKey_)
[aws:ResourceTag/${TagKey}](#amazons3-aws_ResourceTag___TagKey_) / **相关操作:**
- ** [DeleteAccessPointForObjectLambda](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_DeleteAccessPointForObjectLambda.html) **
- **描述:** 授予权限以删除在 URI 中指定的对象 lambda 接入点
- **访问级别:** 写入
- **资源类型（\* 为必需）:** [objectlambdaaccesspoint\*](#amazons3-objectlambdaaccesspoint) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:DataAccessPointArn](#amazons3-s3_DataAccessPointArn)
[s3:DataAccessPointAccount](#amazons3-s3_DataAccessPointAccount)
[s3:AccessPointNetworkOrigin](#amazons3-s3_AccessPointNetworkOrigin)
[s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256) / **相关操作:**
- ** [DeleteAccessPointPolicy](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_DeleteAccessPointPolicy.html) **
- **描述:** 授予权限以删除指定接入点上的策略
- **访问级别:** 权限管理
- **资源类型（\* 为必需）:** [accesspoint\*](#amazons3-accesspoint) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:DataAccessPointArn](#amazons3-s3_DataAccessPointArn)
[s3:DataAccessPointAccount](#amazons3-s3_DataAccessPointAccount)
[s3:AccessPointNetworkOrigin](#amazons3-s3_AccessPointNetworkOrigin)
[s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256)
[s3:AccessPointTag/${TagKey}](#amazons3-s3_AccessPointTag___TagKey_)
[aws:ResourceTag/${TagKey}](#amazons3-aws_ResourceTag___TagKey_) / **相关操作:**
- ** [DeleteAccessPointPolicyForObjectLambda](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_DeleteAccessPointPolicyForObjectLambda.html) **
- **描述:** 授予权限以删除指定对象 lambda 接入点上的策略
- **访问级别:** 权限管理
- **资源类型（\* 为必需）:** [objectlambdaaccesspoint\*](#amazons3-objectlambdaaccesspoint) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:DataAccessPointArn](#amazons3-s3_DataAccessPointArn)
[s3:DataAccessPointAccount](#amazons3-s3_DataAccessPointAccount)
[s3:AccessPointNetworkOrigin](#amazons3-s3_AccessPointNetworkOrigin)
[s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256) / **相关操作:**
- ** [DeleteBucket](https://docs.aws.amazon.com/AmazonS3/latest/API/API_DeleteBucket.html) **
- **描述:** 授予权限以删除在 URI 中指定的存储桶
- **访问级别:** 写入
- **资源类型（\* 为必需）:** [bucket\*](#amazons3-bucket) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256) / **相关操作:**
- ** [DeleteBucketMetadataTableConfiguration](https://docs.aws.amazon.com/AmazonS3/latest/API/API_DeleteBucketMetadataConfiguration.html) **
- **描述:** 授予权限以删除指定的通用存储桶的 S3 元数据配置
- **访问级别:** 写入
- **资源类型（\* 为必需）:** [bucket\*](#amazons3-bucket) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256) / **相关操作:**
- ** [DeleteBucketPolicy](https://docs.aws.amazon.com/AmazonS3/latest/API/API_DeleteBucketPolicy.html) **
- **描述:** 授予权限以删除指定存储桶上的策略
- **访问级别:** 权限管理
- **资源类型（\* 为必需）:** [bucket\*](#amazons3-bucket) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256) / **相关操作:**
- ** [DeleteBucketWebsite](https://docs.aws.amazon.com/AmazonS3/latest/API/API_DeleteBucketWebsite.html) **
- **描述:** 授予权限以删除存储桶的网站配置
- **访问级别:** 写入
- **资源类型（\* 为必需）:** [bucket\*](#amazons3-bucket) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256) / **相关操作:**
- ** [DeleteJobTagging](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_DeleteJobTagging.html) **
- **描述:** 授予权限以从现有 Amazon S3 批量操作作业中删除标签
- **访问级别:** Tagging
- **资源类型（\* 为必需）:** [job\*](#amazons3-job) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256)
[s3:ExistingJobPriority](#amazons3-s3_ExistingJobPriority)
[s3:ExistingJobOperation](#amazons3-s3_ExistingJobOperation) / **相关操作:**
- ** [DeleteMultiRegionAccessPoint](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_DeleteMultiRegionAccessPoint.html) **
- **描述:** 授予删除 URI 中命名的 Multi-Region 接入点的权限
- **访问级别:** 写入
- **资源类型（\* 为必需）:** [multiregionaccesspoint\*](#amazons3-multiregionaccesspoint) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:DataAccessPointAccount](#amazons3-s3_DataAccessPointAccount)
[s3:DataAccessPointArn](#amazons3-s3_DataAccessPointArn)
[s3:AccessPointNetworkOrigin](#amazons3-s3_AccessPointNetworkOrigin)
[s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:TlsVersion](#amazons3-s3_TlsVersion) / **相关操作:**
- ** [DeleteObject](https://docs.aws.amazon.com/AmazonS3/latest/API/API_DeleteObject.html) **
- **描述:** 授予权限以删除对象的空版本并插入删除标记，此版本成为对象的当前版本
- **访问级别:** 写入
- **资源类型（\* 为必需）:** [accesspointobject](#amazons3-accesspointobject) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** [object](#amazons3-object) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:AccessGrantsInstanceArn](#amazons3-s3_AccessGrantsInstanceArn)
[s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256)
[s3:if-match](#amazons3-s3_if-match) / **相关操作:**
- ** [DeleteObjectAnnotation](https://docs.aws.amazon.com/AmazonS3/latest/API/API_DeleteObjectAnnotation.html) **
- **描述:** 授予从对象中删除注释的权限
- **访问级别:** 写入
- **资源类型（\* 为必需）:** [accesspointobject](#amazons3-accesspointobject) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** [object](#amazons3-object) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:x-amz-object-if-match](#amazons3-s3_x-amz-object-if-match)
[s3:ExistingObjectTag/](#amazons3-s3_ExistingObjectTag_key) / **相关操作:**
- ** [DeleteObjectTagging](https://docs.aws.amazon.com/AmazonS3/latest/API/API_DeleteObjectTagging.html) **
- **描述:** 授予权限以使用标记子资源从指定的对象中删除整个标记集
- **访问级别:** 标记
- **资源类型（\* 为必需）:** [accesspointobject](#amazons3-accesspointobject) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** [object](#amazons3-object) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:ExistingObjectTag/](#amazons3-s3_ExistingObjectTag_key)
[s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256) / **相关操作:**
- ** [DeleteObjectVersion](https://docs.aws.amazon.com/AmazonS3/latest/API/API_DeleteObject.html) **
- **描述:** 授予权限以删除特定版本的对象
- **访问级别:** 写入
- **资源类型（\* 为必需）:** [accesspointobject](#amazons3-accesspointobject) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** [object](#amazons3-object) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:AccessGrantsInstanceArn](#amazons3-s3_AccessGrantsInstanceArn)
[s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:versionid](#amazons3-s3_versionid)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256) / **相关操作:**
- ** [DeleteObjectVersionAnnotation](https://docs.aws.amazon.com/AmazonS3/latest/API/API_DeleteObjectAnnotation.html) **
- **描述:** 授予从对象的特定版本中删除注释的权限
- **访问级别:** 写入
- **资源类型（\* 为必需）:** [accesspointobject](#amazons3-accesspointobject) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** [object](#amazons3-object) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:versionid](#amazons3-s3_versionid)
[s3:x-amz-object-if-match](#amazons3-s3_x-amz-object-if-match)
[s3:ExistingObjectTag/](#amazons3-s3_ExistingObjectTag_key) / **相关操作:**
- ** [DeleteObjectVersionTagging](https://docs.aws.amazon.com/AmazonS3/latest/API/API_DeleteObjectTagging.html) **
- **描述:** 授予权限以删除特定版本对象的整个标记集
- **访问级别:** 标记
- **资源类型（\* 为必需）:** [accesspointobject](#amazons3-accesspointobject) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** [object](#amazons3-object) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:ExistingObjectTag/](#amazons3-s3_ExistingObjectTag_key)
[s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:versionid](#amazons3-s3_versionid)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256) / **相关操作:**
- ** [DeleteStorageLensConfiguration](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_DeleteStorageLensConfiguration.html) **
- **描述:** 授予删除现有 Amazon S3 Storage Lens 存储统计管理工具配置的权限
- **访问级别:** 写入
- **资源类型（\* 为必需）:** [storagelensconfiguration\*](#amazons3-storagelensconfiguration) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256) / **相关操作:**
- ** [DeleteStorageLensConfigurationTagging](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_DeleteStorageLensConfigurationTagging.html) **
- **描述:** 授予从现有 Amazon S3 Storage Lens 存储统计管理工具配置中删除标签的权限
- **访问级别:** 标签
- **资源类型（\* 为必需）:** [storagelensconfiguration\*](#amazons3-storagelensconfiguration) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256) / **相关操作:**
- ** [DeleteStorageLensGroup](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_DeleteStorageLensGroup.html) **
- **描述:** 授予删除现有 S3 Storage Lens 存储统计管理工具组的权限
- **访问级别:** 写入
- **资源类型（\* 为必需）:** [storagelensgroup\*](#amazons3-storagelensgroup) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256) / **相关操作:**
- ** [DescribeJob](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_DescribeJob.html) **
- **描述:** 授予权限以检索批量操作作业的配置参数和状态
- **访问级别:** 读取
- **资源类型（\* 为必需）:** [job\*](#amazons3-job) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256) / **相关操作:**
- ** [DescribeMultiRegionAccessPointOperation](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_DescribeMultiRegionAccessPointOperation.html) **
- **描述:** 授予检索 Multi-Region 接入点配置的权限
- **访问级别:** 读取
- **资源类型（\* 为必需）:** [multiregionaccesspointrequestarn\*](#amazons3-multiregionaccesspointrequestarn) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:TlsVersion](#amazons3-s3_TlsVersion) / **相关操作:**
- ** [DissociateAccessGrantsIdentityCenter](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_DissociateAccessGrantsIdentityCenter.html) **
- **描述:** 授予取消关联 Access Grants 身份中心的权限
- **访问级别:** 权限管理
- **资源类型（\* 为必需）:** [accessgrantsinstance\*](#amazons3-accessgrantsinstance) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256)
[aws:ResourceTag/${TagKey}](#amazons3-aws_ResourceTag___TagKey_) / **相关操作:**
- ** [GetAccelerateConfiguration](https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketAccelerateConfiguration.html) **
- **描述:** 授予权限以使用加速子资源返回存储桶的 Transfer Acceleration（传输加速）状态（已启用或已暂停）
- **访问级别:** 读取
- **资源类型（\* 为必需）:** [bucket\*](#amazons3-bucket) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256) / **相关操作:**
- ** [GetAccessGrant](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetAccessGrant.html) **
- **描述:** 授予读取访问授权的权限
- **访问级别:** 读取
- **资源类型（\* 为必需）:** [accessgrant\*](#amazons3-accessgrant) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:AccessGrantScope](#amazons3-s3_AccessGrantScope)
[s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256)
[aws:ResourceTag/${TagKey}](#amazons3-aws_ResourceTag___TagKey_) / **相关操作:**
- ** [GetAccessGrantsInstance](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetAccessGrantsInstance.html) **
- **描述:** 授予读取 Access Grants 实例的权限
- **访问级别:** 读取
- **资源类型（\* 为必需）:** [accessgrantsinstance\*](#amazons3-accessgrantsinstance) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256)
[aws:ResourceTag/${TagKey}](#amazons3-aws_ResourceTag___TagKey_) / **相关操作:**
- ** [GetAccessGrantsInstanceForPrefix](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetAccessGrantsInstanceForPrefix.html) **
- **描述:** 授予按前缀读取 Access Grants 实例的权限
- **访问级别:** 读取
- **资源类型（\* 为必需）:** [accessgrantsinstance\*](#amazons3-accessgrantsinstance) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256)
[aws:ResourceTag/${TagKey}](#amazons3-aws_ResourceTag___TagKey_) / **相关操作:**
- ** [GetAccessGrantsInstanceResourcePolicy](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetAccessGrantsInstanceResourcePolicy.html) **
- **描述:** 授予读取 Access Grants 实例资源策略的权限
- **访问级别:** 读取
- **资源类型（\* 为必需）:** [accessgrantsinstance\*](#amazons3-accessgrantsinstance) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256)
[aws:ResourceTag/${TagKey}](#amazons3-aws_ResourceTag___TagKey_) / **相关操作:**
- ** [GetAccessGrantsLocation](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetAccessGrantsLocation.html) **
- **描述:** 授予读取 Access Grants 位置的权限
- **访问级别:** 读取
- **资源类型（\* 为必需）:** [accessgrantslocation\*](#amazons3-accessgrantslocation) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:AccessGrantsLocationScope](#amazons3-s3_AccessGrantsLocationScope)
[s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256)
[aws:ResourceTag/${TagKey}](#amazons3-aws_ResourceTag___TagKey_) / **相关操作:**
- ** [GetAccessPoint](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetAccessPoint.html) **
- **描述:** 授予权限以返回有关指定接入点的配置信息
- **访问级别:** 读取
- **资源类型（\* 为必需）:**
- **条件键:** [s3:DataAccessPointAccount](#amazons3-s3_DataAccessPointAccount)
[s3:DataAccessPointArn](#amazons3-s3_DataAccessPointArn)
[s3:AccessPointNetworkOrigin](#amazons3-s3_AccessPointNetworkOrigin)
[s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256)
[s3:AccessPointTag/${TagKey}](#amazons3-s3_AccessPointTag___TagKey_)
[aws:ResourceTag/${TagKey}](#amazons3-aws_ResourceTag___TagKey_)
- **相关操作:**
- ** [GetAccessPointConfigurationForObjectLambda](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetAccessPointConfigurationForObjectLambda.html) **
- **描述:** 授予权限以检索对象 lambda 接入点的配置
- **访问级别:** 读取
- **资源类型（\* 为必需）:** [objectlambdaaccesspoint\*](#amazons3-objectlambdaaccesspoint) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:DataAccessPointArn](#amazons3-s3_DataAccessPointArn)
[s3:DataAccessPointAccount](#amazons3-s3_DataAccessPointAccount)
[s3:AccessPointNetworkOrigin](#amazons3-s3_AccessPointNetworkOrigin)
[s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256) / **相关操作:**
- ** [GetAccessPointForObjectLambda](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetAccessPointForObjectLambda.html) **
- **描述:** 授予权限以创建对象 lambda 接入点
- **访问级别:** 读取
- **资源类型（\* 为必需）:** [objectlambdaaccesspoint\*](#amazons3-objectlambdaaccesspoint) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:DataAccessPointAccount](#amazons3-s3_DataAccessPointAccount)
[s3:DataAccessPointArn](#amazons3-s3_DataAccessPointArn)
[s3:AccessPointNetworkOrigin](#amazons3-s3_AccessPointNetworkOrigin)
[s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256) / **相关操作:**
- ** [GetAccessPointPolicy](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetAccessPointPolicy.html) **
- **描述:** 授予权限以返回与指定接入点关联的接入点策略
- **访问级别:** 读取
- **资源类型（\* 为必需）:** [accesspoint\*](#amazons3-accesspoint) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:DataAccessPointAccount](#amazons3-s3_DataAccessPointAccount)
[s3:DataAccessPointArn](#amazons3-s3_DataAccessPointArn)
[s3:AccessPointNetworkOrigin](#amazons3-s3_AccessPointNetworkOrigin)
[s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256)
[s3:AccessPointTag/${TagKey}](#amazons3-s3_AccessPointTag___TagKey_)
[aws:ResourceTag/${TagKey}](#amazons3-aws_ResourceTag___TagKey_) / **相关操作:**
- ** [GetAccessPointPolicyForObjectLambda](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetAccessPointPolicyForObjectLambda.html) **
- **描述:** 授予权限以返回与指定对象 lambda 接入点关联的接入点策略
- **访问级别:** 读取
- **资源类型（\* 为必需）:** [objectlambdaaccesspoint\*](#amazons3-objectlambdaaccesspoint) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:DataAccessPointAccount](#amazons3-s3_DataAccessPointAccount)
[s3:DataAccessPointArn](#amazons3-s3_DataAccessPointArn)
[s3:AccessPointNetworkOrigin](#amazons3-s3_AccessPointNetworkOrigin)
[s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256) / **相关操作:**
- ** [GetAccessPointPolicyStatus](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetAccessPointPolicyStatus.html) **
- **描述:** 授予权限以返回特定接入点策略的策略状态
- **访问级别:** 读取
- **资源类型（\* 为必需）:** [accesspoint\*](#amazons3-accesspoint) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:DataAccessPointAccount](#amazons3-s3_DataAccessPointAccount)
[s3:DataAccessPointArn](#amazons3-s3_DataAccessPointArn)
[s3:AccessPointNetworkOrigin](#amazons3-s3_AccessPointNetworkOrigin)
[s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256)
[s3:AccessPointTag/${TagKey}](#amazons3-s3_AccessPointTag___TagKey_)
[aws:ResourceTag/${TagKey}](#amazons3-aws_ResourceTag___TagKey_) / **相关操作:**
- ** [GetAccessPointPolicyStatusForObjectLambda](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetAccessPointPolicyStatusForObjectLambda.html) **
- **描述:** 授予权限以返回对象 lambda 接入点策略的策略状态
- **访问级别:** 读取
- **资源类型（\* 为必需）:** [objectlambdaaccesspoint\*](#amazons3-objectlambdaaccesspoint) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:DataAccessPointAccount](#amazons3-s3_DataAccessPointAccount)
[s3:DataAccessPointArn](#amazons3-s3_DataAccessPointArn)
[s3:AccessPointNetworkOrigin](#amazons3-s3_AccessPointNetworkOrigin)
[s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256) / **相关操作:**
- ** [GetAccountPublicAccessBlock](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetPublicAccessBlock.html) **
- **描述:** 授予检索 PublicAccessBlock 配置的权限 AWS 账户
- **访问级别:** 读取
- **资源类型（\* 为必需）:**
- **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256)
- **相关操作:**
- ** [GetAnalyticsConfiguration](https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketAnalyticsConfiguration.html) **
- **描述:** 授予权限以从 Amazon S3 存储桶获取分析配置，该存储桶由分析配置 ID 标识
- **访问级别:** 读取
- **资源类型（\* 为必需）:** [bucket\*](#amazons3-bucket) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256) / **相关操作:**
- ** [GetBucketAbac](https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketAbac.html) **
- **描述:** 授予检索通用存储桶的 ABAC 配置的权限
- **访问级别:** 读取
- **资源类型（\* 为必需）:** [bucket\*](#amazons3-bucket) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256) / **相关操作:**
- ** [GetBucketAcl](https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketAcl.html) **
- **描述:** 授予权限以使用 acl 子资源返回 Amazon S3 存储桶的访问控制列表（ACL）
- **访问级别:** 读取
- **资源类型（\* 为必需）:** [accesspoint](#amazons3-accesspoint) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** [bucket](#amazons3-bucket) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256) / **相关操作:**
- ** [GetBucketCORS](https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketCors.html) **
- **描述:** 授予权限以返回 Amazon S3 存储桶的 CORS 配置信息集
- **访问级别:** 读取
- **资源类型（\* 为必需）:** [accesspoint](#amazons3-accesspoint) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** [bucket](#amazons3-bucket) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256) / **相关操作:**
- ** [GetBucketLocation](https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketLocation.html) **
- **描述:** 授予权限以返回 Amazon S3 存储桶所在的区域
- **访问级别:** 读取
- **资源类型（\* 为必需）:** [accesspoint](#amazons3-accesspoint) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** [bucket](#amazons3-bucket) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256) / **相关操作:**
- ** [GetBucketLogging](https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketLogging.html) **
- **描述:** 授予权限以返回 Amazon S3 存储桶的日志记录状态以及用户拥有的查看或修改该状态的权限
- **访问级别:** 读取
- **资源类型（\* 为必需）:** [bucket\*](#amazons3-bucket) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256) / **相关操作:**
- ** [GetBucketMetadataTableConfiguration](https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketMetadataConfiguration.html) **
- **描述:** 授予权限以返回指定的通用存储桶的 S3 元数据配置
- **访问级别:** 读取
- **资源类型（\* 为必需）:** [bucket\*](#amazons3-bucket) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256) / **相关操作:**
- ** [GetBucketNotification](https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketNotification.html) **
- **描述:** 授予权限以获取 Amazon S3 存储桶的通知配置
- **访问级别:** 读取
- **资源类型（\* 为必需）:** [accesspoint](#amazons3-accesspoint) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** [bucket](#amazons3-bucket) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256) / **相关操作:**
- ** [GetBucketObjectLockConfiguration](https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetObjectLockConfiguration.html) **
- **描述:** 授予权限以获取 Amazon S3 存储桶的对象锁定配置
- **访问级别:** 读取
- **资源类型（\* 为必需）:** [bucket\*](#amazons3-bucket) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:signatureversion](#amazons3-s3_signatureversion) / **相关操作:**
- ** [GetBucketOwnershipControls](https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketOwnershipControls.html) **
- **描述:** 授予权限以检索存储桶上的所有权控制
- **访问级别:** 读取
- **资源类型（\* 为必需）:** [bucket\*](#amazons3-bucket) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256) / **相关操作:**
- ** [GetBucketPolicy](https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketPolicy.html) **
- **描述:** 授予权限以返回指定存储桶的策略
- **访问级别:** 读取
- **资源类型（\* 为必需）:** [accesspoint](#amazons3-accesspoint) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** [bucket](#amazons3-bucket) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256) / **相关操作:**
- ** [GetBucketPolicyStatus](https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketPolicyStatus.html) **
- **描述:** 授予权限以检索特定 Amazon S3 存储桶的策略状态，该状态指示存储桶是否为公有的
- **访问级别:** 读取
- **资源类型（\* 为必需）:** [bucket\*](#amazons3-bucket) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256) / **相关操作:**
- ** [GetBucketPublicAccessBlock](https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetPublicAccessBlock.html) **
- **描述:** 授予检索 Amazon S3 存储桶 PublicAccessBlock 配置的权限
- **访问级别:** 读取
- **资源类型（\* 为必需）:** [bucket\*](#amazons3-bucket) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256) / **相关操作:**
- ** [GetBucketRequestPayment](https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketRequestPayment.html) **
- **描述:** 授予权限以返回 Amazon S3 存储桶的请求付款配置
- **访问级别:** 读取
- **资源类型（\* 为必需）:** [bucket\*](#amazons3-bucket) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256) / **相关操作:**
- ** [GetBucketTagging](https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketTagging.html) **
- **描述:** 授予权限以返回与 Amazon S3 存储桶关联的标签集
- **访问级别:** 读取
- **资源类型（\* 为必需）:** [bucket\*](#amazons3-bucket) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256) / **相关操作:**
- ** [GetBucketVersioning](https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketVersioning.html) **
- **描述:** 授予权限以返回 Amazon S3 存储桶的版本控制状态
- **访问级别:** 读取
- **资源类型（\* 为必需）:** [bucket\*](#amazons3-bucket) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256) / **相关操作:**
- ** [GetBucketWebsite](https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketWebsite.html) **
- **描述:** 授予权限以返回 Amazon S3 存储桶的网站配置
- **访问级别:** 读取
- **资源类型（\* 为必需）:** [bucket\*](#amazons3-bucket) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256) / **相关操作:**
- ** [GetDataAccess](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetDataAccess.html) **
- **描述:** 授予获取访问的权限
- **访问级别:** 读取
- **资源类型（\* 为必需）:** [accessgrantsinstance\*](#amazons3-accessgrantsinstance) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256)
[aws:ResourceTag/${TagKey}](#amazons3-aws_ResourceTag___TagKey_) / **相关操作:**
- ** [GetEncryptionConfiguration](https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketEncryption.html) **
- **描述:** 授予权限以返回 Amazon S3 存储桶的默认加密配置
- **访问级别:** 读取
- **资源类型（\* 为必需）:** [bucket\*](#amazons3-bucket) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256) / **相关操作:**
- ** [GetIntelligentTieringConfiguration](https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketIntelligentTieringConfiguration.html) **
- **描述:** 授予获取或列出 S3 存储桶中所有 Amazon S3 Intelligent Tiering 配置的权限
- **访问级别:** 读取
- **资源类型（\* 为必需）:** [bucket\*](#amazons3-bucket) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256) / **相关操作:**
- ** [GetInventoryConfiguration](https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketInventoryConfiguration.html) **
- **描述:** 授予权限以从 Amazon S3 存储桶返回清单配置（由清单配置 ID 标识）
- **访问级别:** 读取
- **资源类型（\* 为必需）:** [bucket\*](#amazons3-bucket) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256) / **相关操作:**
- ** [GetJobTagging](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetJobTagging.html) **
- **描述:** 授予权限以返回现有 Amazon S3 批量操作作业的标签集
- **访问级别:** 读取
- **资源类型（\* 为必需）:** [job\*](#amazons3-job) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256) / **相关操作:**
- ** [GetLifecycleConfiguration](https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketLifecycleConfiguration.html) **
- **描述:** 授予权限以返回 Amazon S3 存储桶上的生命周期配置信息集
- **访问级别:** 读取
- **资源类型（\* 为必需）:** [bucket\*](#amazons3-bucket) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256) / **相关操作:**
- ** [GetMetricsConfiguration](https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketMetricsConfiguration.html) **
- **描述:** 授予权限以从 Amazon S3 存储桶获取指标配置
- **访问级别:** 读取
- **资源类型（\* 为必需）:** [bucket\*](#amazons3-bucket) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256) / **相关操作:**
- ** [GetMultiRegionAccessPoint](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetMultiRegionAccessPoint.html) **
- **描述:** 授予返回有关指定 Multi-Region 接入点的配置信息的权限
- **访问级别:** 读取
- **资源类型（\* 为必需）:** [multiregionaccesspoint\*](#amazons3-multiregionaccesspoint) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:DataAccessPointAccount](#amazons3-s3_DataAccessPointAccount)
[s3:DataAccessPointArn](#amazons3-s3_DataAccessPointArn)
[s3:AccessPointNetworkOrigin](#amazons3-s3_AccessPointNetworkOrigin)
[s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:TlsVersion](#amazons3-s3_TlsVersion) / **相关操作:**
- ** [GetMultiRegionAccessPointPolicy](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetMultiRegionAccessPointPolicy.html) **
- **描述:** 授予返回与指定接入点关联的 Multi-Region 接入点策略的权限
- **访问级别:** 读取
- **资源类型（\* 为必需）:** [multiregionaccesspoint\*](#amazons3-multiregionaccesspoint) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:DataAccessPointAccount](#amazons3-s3_DataAccessPointAccount)
[s3:DataAccessPointArn](#amazons3-s3_DataAccessPointArn)
[s3:AccessPointNetworkOrigin](#amazons3-s3_AccessPointNetworkOrigin)
[s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:TlsVersion](#amazons3-s3_TlsVersion) / **相关操作:**
- ** [GetMultiRegionAccessPointPolicyStatus](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetMultiRegionAccessPointPolicyStatus.html) **
- **描述:** 授予返回特定 Multi-Region 接入点策略的策略状态的权限
- **访问级别:** 读取
- **资源类型（\* 为必需）:** [multiregionaccesspoint\*](#amazons3-multiregionaccesspoint) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:DataAccessPointAccount](#amazons3-s3_DataAccessPointAccount)
[s3:DataAccessPointArn](#amazons3-s3_DataAccessPointArn)
[s3:AccessPointNetworkOrigin](#amazons3-s3_AccessPointNetworkOrigin)
[s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:TlsVersion](#amazons3-s3_TlsVersion) / **相关操作:**
- ** [GetMultiRegionAccessPointRoutes](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetMultiRegionAccessPointRoutes.html) **
- **描述:** 授予返回 Multi-Region 接入点路由配置的权限
- **访问级别:** 读取
- **资源类型（\* 为必需）:** [multiregionaccesspoint\*](#amazons3-multiregionaccesspoint) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:DataAccessPointAccount](#amazons3-s3_DataAccessPointAccount)
[s3:DataAccessPointArn](#amazons3-s3_DataAccessPointArn)
[s3:AccessPointNetworkOrigin](#amazons3-s3_AccessPointNetworkOrigin)
[s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:TlsVersion](#amazons3-s3_TlsVersion) / **相关操作:**
- ** [GetObject](https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetObject.html) **
- **描述:** 授予权限以从 Amazon S3 检索对象
- **访问级别:** 读取
- **资源类型（\* 为必需）:** [accesspointobject](#amazons3-accesspointobject) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** [object](#amazons3-object) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:AccessGrantsInstanceArn](#amazons3-s3_AccessGrantsInstanceArn)
[s3:ExistingObjectTag/](#amazons3-s3_ExistingObjectTag_key)
[s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256) / **相关操作:**
- ** [GetObjectAcl](https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetObjectAcl.html) **
- **描述:** 授予权限以返回对象的访问控制列表 (ACL)
- **访问级别:** 读取
- **资源类型（\* 为必需）:** [accesspointobject](#amazons3-accesspointobject) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** [object](#amazons3-object) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:AccessGrantsInstanceArn](#amazons3-s3_AccessGrantsInstanceArn)
[s3:ExistingObjectTag/](#amazons3-s3_ExistingObjectTag_key)
[s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256) / **相关操作:**
- ** [GetObjectAnnotation](https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetObjectAnnotation.html) **
- **描述:** 授予从对象检索注释的权限
- **访问级别:** 读取
- **资源类型（\* 为必需）:** [accesspointobject](#amazons3-accesspointobject) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** [object](#amazons3-object) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:ExistingObjectTag/](#amazons3-s3_ExistingObjectTag_key) / **相关操作:**
- ** [GetObjectAttributes](https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetObjectAttributes.html) **
- **描述:** 授予权限以检索与特定对象相关的属性
- **访问级别:** 读取
- **资源类型（\* 为必需）:** [accesspointobject](#amazons3-accesspointobject) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** [object](#amazons3-object) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:ExistingObjectTag/](#amazons3-s3_ExistingObjectTag_key)
[s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256) / **相关操作:**
- ** [GetObjectLegalHold](https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetObjectLegalHold.html) **
- **描述:** 授予权限以获取对象的当前依法保留状态
- **访问级别:** 读取
- **资源类型（\* 为必需）:** [accesspointobject](#amazons3-accesspointobject) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** [object](#amazons3-object) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256) / **相关操作:**
- ** [GetObjectRetention](https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetObjectRetention.html) **
- **描述:** 授予权限以检索对象的保留设置
- **访问级别:** 读取
- **资源类型（\* 为必需）:** [accesspointobject](#amazons3-accesspointobject) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** [object](#amazons3-object) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256) / **相关操作:**
- ** [GetObjectTagging](https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetObjectTagging.html) **
- **描述:** 授予权限以返回对象的标签集
- **访问级别:** 读取
- **资源类型（\* 为必需）:** [accesspointobject](#amazons3-accesspointobject) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** [object](#amazons3-object) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:ExistingObjectTag/](#amazons3-s3_ExistingObjectTag_key)
[s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256) / **相关操作:**
- ** [GetObjectTorrent](https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetObjectTorrent.html) **
- **描述:** 授予权限以从 Amazon S3 存储桶返回 Torrent 文件
- **访问级别:** 读取
- **资源类型（\* 为必需）:** [object\*](#amazons3-object) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256) / **相关操作:**
- ** [GetObjectVersion](https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetObject.html) **
- **描述:** 授予权限以检索对象的特定版本
- **访问级别:** 读取
- **资源类型（\* 为必需）:** [accesspointobject](#amazons3-accesspointobject) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** [object](#amazons3-object) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:AccessGrantsInstanceArn](#amazons3-s3_AccessGrantsInstanceArn)
[s3:ExistingObjectTag/](#amazons3-s3_ExistingObjectTag_key)
[s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:versionid](#amazons3-s3_versionid)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256) / **相关操作:**
- ** [GetObjectVersionAcl](https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetObjectAcl.html) **
- **描述:** 授予权限以返回特定对象版本的访问控制列表 (ACL)
- **访问级别:** 读取
- **资源类型（\* 为必需）:** [accesspointobject](#amazons3-accesspointobject) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** [object](#amazons3-object) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:AccessGrantsInstanceArn](#amazons3-s3_AccessGrantsInstanceArn)
[s3:ExistingObjectTag/](#amazons3-s3_ExistingObjectTag_key)
[s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:versionid](#amazons3-s3_versionid)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256) / **相关操作:**
- ** [GetObjectVersionAnnotation](https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetObjectAnnotation.html) **
- **描述:** 授予从对象的特定版本检索注释的权限
- **访问级别:** 读取
- **资源类型（\* 为必需）:** [accesspointobject](#amazons3-accesspointobject) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** [object](#amazons3-object) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:versionid](#amazons3-s3_versionid)
[s3:ExistingObjectTag/](#amazons3-s3_ExistingObjectTag_key) / **相关操作:**
- ** [GetObjectVersionAnnotationForReplication](https://docs.aws.amazon.com/AmazonS3/latest/userguide/setting-repl-config-perm-overview.html) **
- **描述:** 授予获取用于复制的对象版本注释的权限
- **访问级别:** 读取
- **资源类型（\* 为必需）:** [object\*](#amazons3-object) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256) / **相关操作:**
- ** [GetObjectVersionAttributes](https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetObjectAttributes.html) **
- **描述:** 授予权限以检索与对象特定版本相关的属性
- **访问级别:** 读取
- **资源类型（\* 为必需）:** [accesspointobject](#amazons3-accesspointobject) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** [object](#amazons3-object) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:ExistingObjectTag/](#amazons3-s3_ExistingObjectTag_key)
[s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:versionid](#amazons3-s3_versionid)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256) / **相关操作:**
- ** [GetObjectVersionForReplication](https://docs.aws.amazon.com/AmazonS3/latest/userguide/replication-config-for-kms-objects.html) **
- **描述:** 授予复制未加密对象和使用或加密的对象的 SSE-S3 权限 SSE-KMS
- **访问级别:** 读取
- **资源类型（\* 为必需）:** [object\*](#amazons3-object) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256) / **相关操作:**
- ** [GetObjectVersionTagging](https://docs.aws.amazon.com/AmazonS3/latest/userguide/setting-repl-config-perm-overview.html) **
- **描述:** 授予权限以返回特定版本对象的标签集
- **访问级别:** 读取
- **资源类型（\* 为必需）:** [accesspointobject](#amazons3-accesspointobject) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** [object](#amazons3-object) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:ExistingObjectTag/](#amazons3-s3_ExistingObjectTag_key)
[s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:versionid](#amazons3-s3_versionid)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256) / **相关操作:**
- ** [GetObjectVersionTorrent](https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetObjectTorrent.html) **
- **描述:** 授予权限以使用 versionId 子资源获取有关不同版本的 Torrent 文件
- **访问级别:** 读取
- **资源类型（\* 为必需）:** [object\*](#amazons3-object) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:versionid](#amazons3-s3_versionid)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256) / **相关操作:**
- ** [GetReplicationConfiguration](https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketReplication.html) **
- **描述:** 授予权限以获取 Amazon S3 存储桶上的复制配置信息集
- **访问级别:** 读取
- **资源类型（\* 为必需）:** [bucket\*](#amazons3-bucket) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256) / **相关操作:**
- ** [GetStorageLensConfiguration](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetStorageLensConfiguration.html) **
- **描述:** 授予获取 Amazon S3 Storage Lens 存储统计管理工具配置的权限
- **访问级别:** 读取
- **资源类型（\* 为必需）:** [storagelensconfiguration\*](#amazons3-storagelensconfiguration) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256) / **相关操作:**
- ** [GetStorageLensConfigurationTagging](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetStorageLensConfigurationTagging.html) **
- **描述:** 授予获取现有 Amazon S3 Storage Lens 存储统计管理工具配置的标签集的权限
- **访问级别:** 读取
- **资源类型（\* 为必需）:** [storagelensconfiguration\*](#amazons3-storagelensconfiguration) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256) / **相关操作:**
- ** [GetStorageLensDashboard](https://docs.aws.amazon.com/AmazonS3/latest/userguide/storage_lens_dashboard.html) **
- **描述:** 授予获取 Amazon S3 Storage Lens 存储统计管理工具控制面板的权限
- **访问级别:** 读取
- **资源类型（\* 为必需）:** [storagelensconfiguration\*](#amazons3-storagelensconfiguration) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256) / **相关操作:**
- ** [GetStorageLensGroup](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetStorageLensGroup.html) **
- **描述:** 授予获取 Amazon S3 Storage Lens 存储统计管理工具组的权限
- **访问级别:** 读取
- **资源类型（\* 为必需）:** [storagelensgroup\*](#amazons3-storagelensgroup) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256) / **相关操作:**
- ** [InitiateReplication](https://docs.aws.amazon.com/AmazonS3/latest/userguide/setting-repl-config-perm-overview.html) [仅权限]**
- **描述:** 授予通过将对象的复制状态设置为待处理来启动复制进程的权限
- **访问级别:** 写入
- **资源类型（\* 为必需）:** [object\*](#amazons3-object) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:ResourceAccount](#amazons3-s3_ResourceAccount) / **相关操作:**
- ** [ListAccessGrants](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_ListAccessGrants.html) **
- **描述:** 授予列出访问授权的权限
- **访问级别:** 列表
- **资源类型（\* 为必需）:** [accessgrantsinstance\*](#amazons3-accessgrantsinstance) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256)
[aws:ResourceTag/${TagKey}](#amazons3-aws_ResourceTag___TagKey_) / **相关操作:**
- ** [ListAccessGrantsInstances](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_ListAccessGrantsInstances.html) **
- **描述:** 授予列出 Access Grants 实例的权限
- **访问级别:** 列表
- **资源类型（\* 为必需）:**
- **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256)
- **相关操作:**
- ** [ListAccessGrantsLocations](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_ListAccessGrantsLocations.html) **
- **描述:** 授予列出 Access Grants 位置的权限
- **访问级别:** 列表
- **资源类型（\* 为必需）:** [accessgrantsinstance\*](#amazons3-accessgrantsinstance) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256)
[aws:ResourceTag/${TagKey}](#amazons3-aws_ResourceTag___TagKey_) / **相关操作:**
- ** [ListAccessPoints](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_ListAccessPoints.html) **
- **描述:** 授予权限以列出接入点
- **访问级别:** 列出
- **资源类型（\* 为必需）:**
- **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256)
- **相关操作:**
- ** [ListAccessPointsForObjectLambda](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_ListAccessPointsForObjectLambda.html) **
- **描述:** 授予权限以列出对象 lambda 接入点
- **访问级别:** 列表
- **资源类型（\* 为必需）:**
- **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256)
- **相关操作:**
- ** [ListAllMyBuckets](https://docs.aws.amazon.com/AmazonS3/latest/API/API_ListBuckets.html) **
- **描述:** 授予权限以列出该请求的经身份验证的发件人拥有的所有存储桶
- **访问级别:** 列出
- **资源类型（\* 为必需）:**
- **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256)
- **相关操作:**
- ** [ListBucket](https://docs.aws.amazon.com/AmazonS3/latest/API/API_ListObjectsV2.html) **
- **描述:** 授予权限以列出 Amazon S3 存储桶中的部分或全部对象（最多 1000 个）
- **访问级别:** 列出
- **资源类型（\* 为必需）:** [accesspoint](#amazons3-accesspoint) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** [bucket](#amazons3-bucket) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:AccessGrantsInstanceArn](#amazons3-s3_AccessGrantsInstanceArn)
[s3:authType](#amazons3-s3_authType)
[s3:delimiter](#amazons3-s3_delimiter)
[s3:max-keys](#amazons3-s3_max-keys)
[s3:prefix](#amazons3-s3_prefix)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256) / **相关操作:**
- ** [ListBucketMultipartUploads](https://docs.aws.amazon.com/AmazonS3/latest/API/API_ListMultipartUploads.html) **
- **描述:** 授予权限以列出正在进行的分段上传
- **访问级别:** 列出
- **资源类型（\* 为必需）:** [bucket\*](#amazons3-bucket) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:AccessGrantsInstanceArn](#amazons3-s3_AccessGrantsInstanceArn)
[s3:DataAccessPointAccount](#amazons3-s3_DataAccessPointAccount)
[s3:DataAccessPointArn](#amazons3-s3_DataAccessPointArn)
[s3:AccessPointNetworkOrigin](#amazons3-s3_AccessPointNetworkOrigin)
[s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256)
[s3:AccessPointTag/${TagKey}](#amazons3-s3_AccessPointTag___TagKey_)
[aws:ResourceTag/${TagKey}](#amazons3-aws_ResourceTag___TagKey_) / **相关操作:**
- ** [ListBucketVersions](https://docs.aws.amazon.com/AmazonS3/latest/API/API_ListObjectVersions.html) **
- **描述:** 授予权限以列出有关 Amazon S3 存储桶中所有对象版本的元数据
- **访问级别:** 列出
- **资源类型（\* 为必需）:** [accesspoint](#amazons3-accesspoint) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** [bucket](#amazons3-bucket) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:AccessGrantsInstanceArn](#amazons3-s3_AccessGrantsInstanceArn)
[s3:authType](#amazons3-s3_authType)
[s3:delimiter](#amazons3-s3_delimiter)
[s3:max-keys](#amazons3-s3_max-keys)
[s3:prefix](#amazons3-s3_prefix)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256) / **相关操作:**
- ** [ListCallerAccessGrants](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_ListCallerAccessGrants.html) **
- **描述:** 授予权限，以列出调用方的访问授权
- **访问级别:** 列出
- **资源类型（\* 为必需）:** [accessgrantsinstance\*](#amazons3-accessgrantsinstance) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256)
[aws:ResourceTag/${TagKey}](#amazons3-aws_ResourceTag___TagKey_) / **相关操作:**
- ** [ListJobs](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_ListJobs.html) **
- **描述:** 授予权限以列出当前作业和最近结束的作业
- **访问级别:** 列表
- **资源类型（\* 为必需）:**
- **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256)
- **相关操作:**
- ** [ListMultiRegionAccessPoints](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_ListMultiRegionAccessPoints.html) **
- **描述:** 授予列出 Multi-Region 接入点的权限
- **访问级别:** 列表
- **资源类型（\* 为必需）:**
- **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
- **相关操作:**
- ** [ListMultipartUploadParts](https://docs.aws.amazon.com/AmazonS3/latest/API/API_ListParts.html) **
- **描述:** 授予权限以列出为特定分段上传而上传的部分
- **访问级别:** 列表
- **资源类型（\* 为必需）:** [accesspointobject](#amazons3-accesspointobject) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** [object](#amazons3-object) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:AccessGrantsInstanceArn](#amazons3-s3_AccessGrantsInstanceArn)
[s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256) / **相关操作:**
- ** [ListObjectAnnotations](https://docs.aws.amazon.com/AmazonS3/latest/API/API_ListObjectAnnotations.html) **
- **描述:** 授予列出对象注释的权限
- **访问级别:** 列表
- **资源类型（\* 为必需）:** [accesspointobject](#amazons3-accesspointobject) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** [object](#amazons3-object) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:annotation-prefix](#amazons3-s3_annotation-prefix)
[s3:max-annotation-results](#amazons3-s3_max-annotation-results)
[s3:ExistingObjectTag/](#amazons3-s3_ExistingObjectTag_key) / **相关操作:**
- ** [ListObjectVersionAnnotations](https://docs.aws.amazon.com/AmazonS3/latest/API/API_ListObjectAnnotations.html) **
- **描述:** 授予列出对象特定版本的注释的权限
- **访问级别:** 列表
- **资源类型（\* 为必需）:** [accesspointobject](#amazons3-accesspointobject) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** [object](#amazons3-object) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:versionid](#amazons3-s3_versionid)
[s3:annotation-prefix](#amazons3-s3_annotation-prefix)
[s3:max-annotation-results](#amazons3-s3_max-annotation-results)
[s3:ExistingObjectTag/](#amazons3-s3_ExistingObjectTag_key) / **相关操作:**
- ** [ListStorageLensConfigurations](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_ListStorageLensConfigurations.html) **
- **描述:** 授予列出 Amazon S3 Storage Lens 存储统计管理工具配置的权限
- **访问级别:** 列表
- **资源类型（\* 为必需）:**
- **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256)
- **相关操作:**
- ** [ListStorageLensGroups](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_ListStorageLensGroups.html) **
- **描述:** 授予列出 S3 Storage Lens 组的权限
- **访问级别:** 列表
- **资源类型（\* 为必需）:**
- **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256)
- **相关操作:**
- ** [ListTagsForResource](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_ListTagsForResource.html) **
- **描述:** 授予列出附加到指定资源的标签的权限
- **访问级别:** 列表
- **资源类型（\* 为必需）:** [accessgrant](#amazons3-accessgrant) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** [accessgrantsinstance](#amazons3-accessgrantsinstance) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** [accessgrantslocation](#amazons3-accessgrantslocation) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** [accesspoint](#amazons3-accesspoint) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** [bucket](#amazons3-bucket) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** [storagelensgroup](#amazons3-storagelensgroup) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256) / **相关操作:**
- ** [ObjectOwnerOverrideToBucketOwner](https://docs.aws.amazon.com/AmazonS3/latest/userguide/replication-change-owner.html#repl-ownership-add-role-permission) **
- **描述:** 授予权限以更改副本所有权
- **访问级别:** 权限管理
- **资源类型（\* 为必需）:** [object\*](#amazons3-object) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256) / **相关操作:**
- ** [PauseReplication](https://docs.aws.amazon.com/fis/latest/userguide/fis-actions-reference.html#bucket-pause-replication) [仅权限]**
- **描述:** 授予权限，以暂停从目标源存储桶到目的地存储桶的 S3 复制
- **访问级别:** 写入
- **资源类型（\* 为必需）:** [bucket\*](#amazons3-bucket) / **条件键:** / **相关操作:** s3:GetReplicationConfiguration
s3:PutReplicationConfiguration
- **资源类型（\* 为必需）:** / **条件键:** [s3:destinationRegion](#amazons3-s3_destinationRegion)
[s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256) / **相关操作:**
- ** [PutAccelerateConfiguration](https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutBucketAccelerateConfiguration.html) **
- **描述:** 授予权限以使用加速子资源设置现有 S3 存储桶的 Transfer Acceleration（传输加速）状态
- **访问级别:** 写入
- **资源类型（\* 为必需）:** [bucket\*](#amazons3-bucket) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256) / **相关操作:**
- ** [PutAccessGrantsInstanceResourcePolicy](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_PutAccessGrantsInstanceResourcePolicy.html) **
- **描述:** 授予放置 Access Grants 实例资源策略的权限
- **访问级别:** 权限管理
- **资源类型（\* 为必需）:** [accessgrantsinstance\*](#amazons3-accessgrantsinstance) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256)
[aws:ResourceTag/${TagKey}](#amazons3-aws_ResourceTag___TagKey_) / **相关操作:**
- ** [PutAccessPointConfigurationForObjectLambda](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_PutAccessPointConfigurationForObjectLambda.html) **
- **描述:** 授予权限以配置对象 lambda 接入点
- **访问级别:** 写入
- **资源类型（\* 为必需）:** [objectlambdaaccesspoint\*](#amazons3-objectlambdaaccesspoint) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:DataAccessPointArn](#amazons3-s3_DataAccessPointArn)
[s3:DataAccessPointAccount](#amazons3-s3_DataAccessPointAccount)
[s3:AccessPointNetworkOrigin](#amazons3-s3_AccessPointNetworkOrigin)
[s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256) / **相关操作:**
- ** [PutAccessPointPolicy](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_PutAccessPointPolicy.html) **
- **描述:** 授予权限以将访问策略与指定接入点关联
- **访问级别:** 权限管理
- **资源类型（\* 为必需）:** [accesspoint\*](#amazons3-accesspoint) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256) / **相关操作:**
- ** [PutAccessPointPolicyForObjectLambda](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_PutAccessPointPolicyForObjectLambda.html) **
- **描述:** 授予权限以将访问策略与指定对象 lambda 接入点关联
- **访问级别:** Permissions management
- **资源类型（\* 为必需）:** [objectlambdaaccesspoint\*](#amazons3-objectlambdaaccesspoint) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:DataAccessPointAccount](#amazons3-s3_DataAccessPointAccount)
[s3:DataAccessPointArn](#amazons3-s3_DataAccessPointArn)
[s3:AccessPointNetworkOrigin](#amazons3-s3_AccessPointNetworkOrigin)
[s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256) / **相关操作:**
- ** [PutAccessPointPublicAccessBlock](https://docs.aws.amazon.com/AmazonS3/latest/userguide/access-control-block-public-access.html#access-control-block-public-access-examples-access-point) **
- **描述:** 授予权限以在创建接入点时将公有访问块配置与指定接入点关联
- **访问级别:** 权限管理
- **资源类型（\* 为必需）:**
- **条件键:**
- **相关操作:**
- ** [PutAccountPublicAccessBlock](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_PutPublicAccessBlock.html) **
- **描述:** 授予创建或修改 PublicAccessBlock 配置的权限 AWS 账户
- **访问级别:** 权限管理
- **资源类型（\* 为必需）:**
- **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256)
- **相关操作:**
- ** [PutAnalyticsConfiguration](https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutBucketAnalyticsConfiguration.html) **
- **描述:** 授予权限以便为存储桶设置分析配置（由分析配置 ID 指定）
- **访问级别:** 写入
- **资源类型（\* 为必需）:** [bucket\*](#amazons3-bucket) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256) / **相关操作:**
- ** [PutBucketAbac](https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutBucketAbac.html) **
- **描述:** 授予为通用存储桶设置 ABAC 配置的权限
- **访问级别:** 写入
- **资源类型（\* 为必需）:** [bucket\*](#amazons3-bucket) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256) / **相关操作:**
- ** [PutBucketAcl](https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutBucketAcl.html) **
- **描述:** 授予权限以使用访问控制列表（ACL）设置对现有存储桶的权限
- **访问级别:** 权限管理
- **资源类型（\* 为必需）:** [bucket\*](#amazons3-bucket) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-acl](#amazons3-s3_x-amz-acl)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256)
[s3:x-amz-grant-full-control](#amazons3-s3_x-amz-grant-full-control)
[s3:x-amz-grant-read](#amazons3-s3_x-amz-grant-read)
[s3:x-amz-grant-read-acp](#amazons3-s3_x-amz-grant-read-acp)
[s3:x-amz-grant-write](#amazons3-s3_x-amz-grant-write)
[s3:x-amz-grant-write-acp](#amazons3-s3_x-amz-grant-write-acp) / **相关操作:**
- ** [PutBucketCORS](https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutBucketCors.html) **
- **描述:** 授予权限以便为 Amazon S3 存储桶设置 CORS 配置
- **访问级别:** Write
- **资源类型（\* 为必需）:** [bucket\*](#amazons3-bucket) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256) / **相关操作:**
- ** [PutBucketLogging](https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutBucketLogging.html) **
- **描述:** 授予权限以设置 Amazon S3 存储桶的日志记录参数
- **访问级别:** 写入
- **资源类型（\* 为必需）:** [bucket\*](#amazons3-bucket) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256) / **相关操作:**
- ** [PutBucketNotification](https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutBucketNotification.html) **
- **描述:** 授予权限以在 Amazon S3 存储桶中发生某些事件时接收通知
- **访问级别:** 写入
- **资源类型（\* 为必需）:** [bucket\*](#amazons3-bucket) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256) / **相关操作:**
- ** [PutBucketObjectLockConfiguration](https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutObjectLockConfiguration.html) **
- **描述:** 授予权限以在特定存储桶上放置对象锁定配置
- **访问级别:** 写入
- **资源类型（\* 为必需）:** [bucket\*](#amazons3-bucket) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:signatureversion](#amazons3-s3_signatureversion) / **相关操作:**
- ** [PutBucketOwnershipControls](https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutBucketOwnershipControls.html) **
- **描述:** 授予权限以添加、替换或删除存储桶上的所有权控制
- **访问级别:** 权限管理
- **资源类型（\* 为必需）:** [bucket\*](#amazons3-bucket) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256) / **相关操作:**
- ** [PutBucketPolicy](https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutBucketPolicy.html) **
- **描述:** 授予权限以在存储桶上添加或替换存储桶策略
- **访问级别:** 权限管理
- **资源类型（\* 为必需）:** [bucket\*](#amazons3-bucket) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256) / **相关操作:**
- ** [PutBucketPublicAccessBlock](https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutPublicAccessBlock.html) **
- **描述:** 授予创建或修改特定 Amazon S3 存储桶 PublicAccessBlock 配置的权限
- **访问级别:** 权限管理
- **资源类型（\* 为必需）:** [bucket\*](#amazons3-bucket) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256) / **相关操作:**
- ** [PutBucketRequestPayment](https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutBucketRequestPayment.html) **
- **描述:** 授予权限以设置存储桶的请求付款配置
- **访问级别:** 写入
- **资源类型（\* 为必需）:** [bucket\*](#amazons3-bucket) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256) / **相关操作:**
- ** [PutBucketTagging](https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutBucketTagging.html) **
- **描述:** 授予权限以向现有 Amazon S3 存储桶添加一组标签
- **访问级别:** 标记
- **资源类型（\* 为必需）:** [bucket\*](#amazons3-bucket) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256) / **相关操作:**
- ** [PutBucketVersioning](https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutBucketVersioning.html) **
- **描述:** 授予权限以设置现有 Amazon S3 存储桶的版本控制状态
- **访问级别:** 写入
- **资源类型（\* 为必需）:** [bucket\*](#amazons3-bucket) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256) / **相关操作:**
- ** [PutBucketWebsite](https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutBucketWebsite.html) **
- **描述:** 授予权限以设置在网站子资源中指定的网站的配置
- **访问级别:** 写入
- **资源类型（\* 为必需）:** [bucket\*](#amazons3-bucket) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256) / **相关操作:**
- ** [PutEncryptionConfiguration](https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutBucketEncryption.html) **
- **描述:** 授予权限以设置 Amazon S3 存储桶的加密配置
- **访问级别:** 写入
- **资源类型（\* 为必需）:** [bucket\*](#amazons3-bucket) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256) / **相关操作:**
- ** [PutIntelligentTieringConfiguration](https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutBucketIntelligentTieringConfiguration.html) **
- **描述:** 授予创建新的 Amazon S3 Intelligent Tiering 配置、更新或删除现有 Amazon S3 Intelligent Tiering 配置的权限
- **访问级别:** 写入
- **资源类型（\* 为必需）:** [bucket\*](#amazons3-bucket) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256) / **相关操作:**
- ** [PutInventoryConfiguration](https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutBucketInventoryConfiguration.html) **
- **描述:** 授予权限以向存储桶添加清单配置（由清单 ID 标识）
- **访问级别:** 写入
- **资源类型（\* 为必需）:** [bucket\*](#amazons3-bucket) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256)
[s3:InventoryAccessibleOptionalFields](#amazons3-s3_InventoryAccessibleOptionalFields) / **相关操作:**
- ** [PutJobTagging](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_PutJobTagging.html) **
- **描述:** 授予权限以替换现有 Amazon S3 批量操作作业上的标签
- **访问级别:** 标记
- **资源类型（\* 为必需）:** [job\*](#amazons3-job) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256)
[s3:ExistingJobPriority](#amazons3-s3_ExistingJobPriority)
[s3:ExistingJobOperation](#amazons3-s3_ExistingJobOperation)
[aws:TagKeys](#amazons3-aws_TagKeys)
[aws:RequestTag/${TagKey}](#amazons3-aws_RequestTag___TagKey_) / **相关操作:**
- ** [PutLifecycleConfiguration](https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutBucketLifecycleConfiguration.html) **
- **描述:** 授予权限以便为存储桶创建新的生命周期配置或替换现有生命周期配置
- **访问级别:** 写入
- **资源类型（\* 为必需）:** [bucket\*](#amazons3-bucket) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256) / **相关操作:**
- ** [PutMetricsConfiguration](https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutBucketMetricsConfiguration.html) **
- **描述:** 授予权限以设置或更新来自 Amazon S3 存储桶的 CloudWatch 请求指标的指标配置
- **访问级别:** 写入
- **资源类型（\* 为必需）:** [bucket\*](#amazons3-bucket) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256) / **相关操作:**
- ** [PutMultiRegionAccessPointPolicy](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_PutMultiRegionAccessPointPolicy.html) **
- **描述:** 授予将访问策略与指定接入点关联的 Multi-Region 权限
- **访问级别:** 权限管理
- **资源类型（\* 为必需）:** [multiregionaccesspoint\*](#amazons3-multiregionaccesspoint) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:DataAccessPointAccount](#amazons3-s3_DataAccessPointAccount)
[s3:DataAccessPointArn](#amazons3-s3_DataAccessPointArn)
[s3:AccessPointNetworkOrigin](#amazons3-s3_AccessPointNetworkOrigin)
[s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:TlsVersion](#amazons3-s3_TlsVersion) / **相关操作:**
- ** [PutObject](https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutObject.html) **
- **描述:** 授予权限以将对象添加到存储桶
- **访问级别:** 写入
- **资源类型（\* 为必需）:** [accesspointobject](#amazons3-accesspointobject) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** [object](#amazons3-object) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:AccessGrantsInstanceArn](#amazons3-s3_AccessGrantsInstanceArn)
[s3:RequestObjectTag/](#amazons3-s3_RequestObjectTag_key)
[s3:RequestObjectTagKeys](#amazons3-s3_RequestObjectTagKeys)
[s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-acl](#amazons3-s3_x-amz-acl)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256)
[s3:x-amz-copy-source](#amazons3-s3_x-amz-copy-source)
[s3:x-amz-grant-full-control](#amazons3-s3_x-amz-grant-full-control)
[s3:x-amz-grant-read](#amazons3-s3_x-amz-grant-read)
[s3:x-amz-grant-read-acp](#amazons3-s3_x-amz-grant-read-acp)
[s3:x-amz-grant-write](#amazons3-s3_x-amz-grant-write)
[s3:x-amz-grant-write-acp](#amazons3-s3_x-amz-grant-write-acp)
[s3:x-amz-metadata-directive](#amazons3-s3_x-amz-metadata-directive)
[s3:x-amz-object-annotation-directive](#amazons3-s3_x-amz-object-annotation-directive)
[s3:x-amz-server-side-encryption](#amazons3-s3_x-amz-server-side-encryption)
[s3:x-amz-server-side-encryption-aws-kms-key-id](#amazons3-s3_x-amz-server-side-encryption-aws-kms-key-id)
[s3:x-amz-server-side-encryption-customer-algorithm](#amazons3-s3_x-amz-server-side-encryption-customer-algorithm)
[s3:x-amz-storage-class](#amazons3-s3_x-amz-storage-class)
[s3:x-amz-website-redirect-location](#amazons3-s3_x-amz-website-redirect-location)
[s3:object-lock-mode](#amazons3-s3_object-lock-mode)
[s3:object-lock-retain-until-date](#amazons3-s3_object-lock-retain-until-date)
[s3:object-lock-remaining-retention-days](#amazons3-s3_object-lock-remaining-retention-days)
[s3:object-lock-legal-hold](#amazons3-s3_object-lock-legal-hold)
[s3:if-match](#amazons3-s3_if-match)
[s3:if-none-match](#amazons3-s3_if-none-match)
[s3:ObjectCreationOperation](#amazons3-s3_ObjectCreationOperation) / **相关操作:**
- ** [PutObjectAcl](https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutObjectAcl.html) **
- **描述:** 授予权限以便为 S3 存储桶中的新对象或现有对象设置访问控制列表（ACL）权限
- **访问级别:** 权限管理
- **资源类型（\* 为必需）:** [accesspointobject](#amazons3-accesspointobject) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** [object](#amazons3-object) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:AccessGrantsInstanceArn](#amazons3-s3_AccessGrantsInstanceArn)
[s3:ExistingObjectTag/](#amazons3-s3_ExistingObjectTag_key)
[s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-acl](#amazons3-s3_x-amz-acl)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256)
[s3:x-amz-grant-full-control](#amazons3-s3_x-amz-grant-full-control)
[s3:x-amz-grant-read](#amazons3-s3_x-amz-grant-read)
[s3:x-amz-grant-read-acp](#amazons3-s3_x-amz-grant-read-acp)
[s3:x-amz-grant-write](#amazons3-s3_x-amz-grant-write)
[s3:x-amz-grant-write-acp](#amazons3-s3_x-amz-grant-write-acp)
[s3:x-amz-storage-class](#amazons3-s3_x-amz-storage-class) / **相关操作:**
- ** [PutObjectAnnotation](https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutObjectAnnotation.html) **
- **描述:** 授予在对象上添加或替换注释的权限
- **访问级别:** 写入
- **资源类型（\* 为必需）:** [accesspointobject](#amazons3-accesspointobject) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** [object](#amazons3-object) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:x-amz-object-if-match](#amazons3-s3_x-amz-object-if-match)
[s3:ExistingObjectTag/](#amazons3-s3_ExistingObjectTag_key) / **相关操作:**
- ** [PutObjectLegalHold](https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutObjectLegalHold.html) **
- **描述:** 授予权限以将依法保留配置应用于指定的对象
- **访问级别:** 写入
- **资源类型（\* 为必需）:** [accesspointobject](#amazons3-accesspointobject) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** [object](#amazons3-object) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256)
[s3:object-lock-legal-hold](#amazons3-s3_object-lock-legal-hold) / **相关操作:**
- ** [PutObjectRetention](https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutObjectRetention.html) **
- **描述:** 授予权限以在对象上放置对象保留配置
- **访问级别:** 写入
- **资源类型（\* 为必需）:** [accesspointobject](#amazons3-accesspointobject) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** [object](#amazons3-object) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256)
[s3:object-lock-mode](#amazons3-s3_object-lock-mode)
[s3:object-lock-retain-until-date](#amazons3-s3_object-lock-retain-until-date)
[s3:object-lock-remaining-retention-days](#amazons3-s3_object-lock-remaining-retention-days) / **相关操作:**
- ** [PutObjectTagging](https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutObjectTagging.html) **
- **描述:** 授予权限以将提供的标签集设置为存储桶中已存在的对象
- **访问级别:** 标记
- **资源类型（\* 为必需）:** [accesspointobject](#amazons3-accesspointobject) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** [object](#amazons3-object) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:ExistingObjectTag/](#amazons3-s3_ExistingObjectTag_key)
[s3:RequestObjectTag/](#amazons3-s3_RequestObjectTag_key)
[s3:RequestObjectTagKeys](#amazons3-s3_RequestObjectTagKeys)
[s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256) / **相关操作:**
- ** [PutObjectVersionAcl](https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutObjectAcl.html) **
- **描述:** 授予权限以使用 acl 子资源为存储桶中已存在的对象设置访问控制列表（ACL）权限
- **访问级别:** 权限管理
- **资源类型（\* 为必需）:** [accesspointobject](#amazons3-accesspointobject) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** [object](#amazons3-object) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:AccessGrantsInstanceArn](#amazons3-s3_AccessGrantsInstanceArn)
[s3:ExistingObjectTag/](#amazons3-s3_ExistingObjectTag_key)
[s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:versionid](#amazons3-s3_versionid)
[s3:x-amz-acl](#amazons3-s3_x-amz-acl)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256)
[s3:x-amz-grant-full-control](#amazons3-s3_x-amz-grant-full-control)
[s3:x-amz-grant-read](#amazons3-s3_x-amz-grant-read)
[s3:x-amz-grant-read-acp](#amazons3-s3_x-amz-grant-read-acp)
[s3:x-amz-grant-write](#amazons3-s3_x-amz-grant-write)
[s3:x-amz-grant-write-acp](#amazons3-s3_x-amz-grant-write-acp)
[s3:x-amz-storage-class](#amazons3-s3_x-amz-storage-class) / **相关操作:**
- ** [PutObjectVersionAnnotation](https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutObjectAnnotation.html) **
- **描述:** 授予在对象的特定版本上添加或替换注释的权限
- **访问级别:** 写入
- **资源类型（\* 为必需）:** [accesspointobject](#amazons3-accesspointobject) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** [object](#amazons3-object) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:versionid](#amazons3-s3_versionid)
[s3:x-amz-object-if-match](#amazons3-s3_x-amz-object-if-match)
[s3:ExistingObjectTag/](#amazons3-s3_ExistingObjectTag_key) / **相关操作:**
- ** [PutObjectVersionTagging](https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutObjectTagging.html) **
- **描述:** 授予权限以便为对象的特定版本设置提供的标签集
- **访问级别:** 标记
- **资源类型（\* 为必需）:** [accesspointobject](#amazons3-accesspointobject) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** [object](#amazons3-object) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:ExistingObjectTag/](#amazons3-s3_ExistingObjectTag_key)
[s3:RequestObjectTag/](#amazons3-s3_RequestObjectTag_key)
[s3:RequestObjectTagKeys](#amazons3-s3_RequestObjectTagKeys)
[s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:versionid](#amazons3-s3_versionid)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256) / **相关操作:**
- ** [PutReplicationConfiguration](https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutBucketReplication.html) **
- **描述:** 授予权限以创建新的复制配置或替换现有复制配置
- **访问级别:** 写入
- **资源类型（\* 为必需）:** [bucket\*](#amazons3-bucket) / **条件键:** / **相关操作:** iam:PassRole
- **资源类型（\* 为必需）:** / **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256)
[s3:isReplicationPauseRequest](#amazons3-s3_isReplicationPauseRequest) / **相关操作:**
- ** [PutStorageLensConfiguration](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_PutStorageLensConfiguration.html) **
- **描述:** 授予创建或更新 Amazon S3 Storage Lens 存储统计管理工具配置的权限
- **访问级别:** 写入
- **资源类型（\* 为必需）:**
- **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256)
[aws:TagKeys](#amazons3-aws_TagKeys)
[aws:RequestTag/${TagKey}](#amazons3-aws_RequestTag___TagKey_)
- **相关操作:**
- ** [PutStorageLensConfigurationTagging](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_PutStorageLensConfigurationTagging.html) **
- **描述:** 授予在现有 Amazon S3 Storage Lens 存储统计管理工具配置上放置或替换标签的权限
- **访问级别:** 标记
- **资源类型（\* 为必需）:** [storagelensconfiguration\*](#amazons3-storagelensconfiguration) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256)
[aws:TagKeys](#amazons3-aws_TagKeys)
[aws:RequestTag/${TagKey}](#amazons3-aws_RequestTag___TagKey_) / **相关操作:**
- ** [ReplicateDelete](https://docs.aws.amazon.com/AmazonS3/latest/userguide/setting-repl-config-perm-overview.html) **
- **描述:** 授予权限以将删除标记复制到目标存储桶
- **访问级别:** 写入
- **资源类型（\* 为必需）:** [object\*](#amazons3-object) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256) / **相关操作:**
- ** [ReplicateObject](https://docs.aws.amazon.com/AmazonS3/latest/userguide/setting-repl-config-perm-overview.html) **
- **描述:** 授予权限以将对象和对象标签复制到目标存储桶
- **访问级别:** 写入
- **资源类型（\* 为必需）:** [object\*](#amazons3-object) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256)
[s3:x-amz-server-side-encryption](#amazons3-s3_x-amz-server-side-encryption)
[s3:x-amz-server-side-encryption-aws-kms-key-id](#amazons3-s3_x-amz-server-side-encryption-aws-kms-key-id)
[s3:x-amz-server-side-encryption-customer-algorithm](#amazons3-s3_x-amz-server-side-encryption-customer-algorithm) / **相关操作:**
- ** [ReplicateObjectAnnotation](https://docs.aws.amazon.com/AmazonS3/latest/userguide/setting-repl-config-perm-overview.html) **
- **描述:** 授予将注解复制到目标存储桶的权限
- **访问级别:** 写入
- **资源类型（\* 为必需）:** [object\*](#amazons3-object) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256) / **相关操作:**
- ** [ReplicateTags](https://docs.aws.amazon.com/AmazonS3/latest/userguide/setting-repl-config-perm-overview.html) **
- **描述:** 授予权限以将对象标签复制到目标存储桶
- **访问级别:** 标记
- **资源类型（\* 为必需）:** [object\*](#amazons3-object) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256) / **相关操作:**
- ** [RestoreObject](https://docs.aws.amazon.com/AmazonS3/latest/API/API_RestoreObject.html) **
- **描述:** 授予权限以将对象的归档副本恢复到 Amazon S3
- **访问级别:** 写入
- **资源类型（\* 为必需）:** [accesspointobject](#amazons3-accesspointobject) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** [object](#amazons3-object) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256) / **相关操作:**
- ** [SubmitMultiRegionAccessPointRoutes](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_SubmitMultiRegionAccessPointRoutes.html) **
- **描述:** 授予提交 Multi-Region 接入点路由配置更新的权限
- **访问级别:** 写入
- **资源类型（\* 为必需）:** [multiregionaccesspoint\*](#amazons3-multiregionaccesspoint) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:DataAccessPointAccount](#amazons3-s3_DataAccessPointAccount)
[s3:DataAccessPointArn](#amazons3-s3_DataAccessPointArn)
[s3:AccessPointNetworkOrigin](#amazons3-s3_AccessPointNetworkOrigin)
[s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:TlsVersion](#amazons3-s3_TlsVersion) / **相关操作:**
- ** [TagResource](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_TagResource.html) **
- **描述:** 授予为指定资源添加标签的权限
- **访问级别:** 标签
- **资源类型（\* 为必需）:** [accessgrant](#amazons3-accessgrant) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** [accessgrantsinstance](#amazons3-accessgrantsinstance) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** [accessgrantslocation](#amazons3-accessgrantslocation) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** [accesspoint](#amazons3-accesspoint) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** [bucket](#amazons3-bucket) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** [storagelensgroup](#amazons3-storagelensgroup) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256)
[aws:TagKeys](#amazons3-aws_TagKeys)
[aws:RequestTag/${TagKey}](#amazons3-aws_RequestTag___TagKey_) / **相关操作:**
- ** [UntagResource](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_UntagResource.html) **
- **描述:** 授予从指定的资源中删除标签的权限
- **访问级别:** 标签
- **资源类型（\* 为必需）:** [accessgrant](#amazons3-accessgrant) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** [accessgrantsinstance](#amazons3-accessgrantsinstance) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** [accessgrantslocation](#amazons3-accessgrantslocation) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** [accesspoint](#amazons3-accesspoint) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** [bucket](#amazons3-bucket) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** [storagelensgroup](#amazons3-storagelensgroup) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256)
[aws:TagKeys](#amazons3-aws_TagKeys) / **相关操作:**
- ** [UpdateAccessGrantsLocation](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_UpdateAccessGrantsLocation.html) **
- **描述:** 授予更新 Access Grants 位置的权限
- **访问级别:** 权限管理
- **资源类型（\* 为必需）:** [accessgrantslocation\*](#amazons3-accessgrantslocation) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:AccessGrantsLocationScope](#amazons3-s3_AccessGrantsLocationScope)
[s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256)
[aws:ResourceTag/${TagKey}](#amazons3-aws_ResourceTag___TagKey_) / **相关操作:**
- ** [UpdateBucketMetadataAnnotationTableConfiguration](https://docs.aws.amazon.com/AmazonS3/latest/API/API_UpdateBucketMetadataAnnotationTableConfiguration.html) **
- **描述:** 授予更新存储桶注释表配置的权限
- **访问级别:** 写入
- **资源类型（\* 为必需）:** [bucket\*](#amazons3-bucket) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256) / **相关操作:**
- ** [UpdateBucketMetadataInventoryTableConfiguration](https://docs.aws.amazon.com/AmazonS3/latest/API/API_UpdateBucketMetadataInventoryTableConfiguration.html) **
- **描述:** 授予权限以更新指定的通用存储桶的现有 S3 元数据配置中的清单表配置
- **访问级别:** 写入
- **资源类型（\* 为必需）:** [bucket\*](#amazons3-bucket) / **条件键:** / **相关操作:** kms:DescribeKey
s3tables:CreateNamespace
s3tables:CreateTable
s3tables:CreateTableBucket
s3tables:GetTable
s3tables:PutTableEncryption
s3tables:PutTablePolicy
- **资源类型（\* 为必需）:** / **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256) / **相关操作:**
- ** [UpdateBucketMetadataJournalTableConfiguration](https://docs.aws.amazon.com/AmazonS3/latest/API/API_UpdateBucketMetadataJournalTableConfiguration.html) **
- **描述:** 授予权限以更新指定的通用存储桶的现有 S3 元数据配置中的日记表配置
- **访问级别:** 写入
- **资源类型（\* 为必需）:** [bucket\*](#amazons3-bucket) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256) / **相关操作:**
- ** [UpdateJobPriority](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_UpdateJobPriority.html) **
- **描述:** 授予权限以更新现有作业的优先级
- **访问级别:** 写入
- **资源类型（\* 为必需）:** [job\*](#amazons3-job) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256)
[s3:RequestJobPriority](#amazons3-s3_RequestJobPriority)
[s3:ExistingJobPriority](#amazons3-s3_ExistingJobPriority)
[s3:ExistingJobOperation](#amazons3-s3_ExistingJobOperation) / **相关操作:**
- ** [UpdateJobStatus](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_UpdateJobStatus.html) **
- **描述:** 授予权限以更新指定作业的状态
- **访问级别:** 写入
- **资源类型（\* 为必需）:** [job\*](#amazons3-job) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256)
[s3:ExistingJobPriority](#amazons3-s3_ExistingJobPriority)
[s3:ExistingJobOperation](#amazons3-s3_ExistingJobOperation)
[s3:JobSuspendedCause](#amazons3-s3_JobSuspendedCause) / **相关操作:**
- ** [UpdateObjectEncryption](https://docs.aws.amazon.com/AmazonS3/latest/API/API_UpdateObjectEncryption.html) **
- **描述:** 授予更新通用存储桶中现有对象的服务器端加密类型的权限
- **访问级别:** 写入
- **资源类型（\* 为必需）:** [accesspointobject](#amazons3-accesspointobject) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** [object](#amazons3-object) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:ExistingObjectTag/](#amazons3-s3_ExistingObjectTag_key)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256)
[s3:x-amz-server-side-encryption](#amazons3-s3_x-amz-server-side-encryption)
[s3:x-amz-server-side-encryption-aws-kms-key-id](#amazons3-s3_x-amz-server-side-encryption-aws-kms-key-id) / **相关操作:**
- ** [UpdateStorageLensGroup](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_UpdateStorageLensGroup.html) **
- **描述:** 授予更新现有 S3 Storage Lens 存储统计管理工具组的权限
- **访问级别:** 写入
- **资源类型（\* 为必需）:** [storagelensgroup\*](#amazons3-storagelensgroup) / **条件键:** / **相关操作:**
- **资源类型（\* 为必需）:** / **条件键:** [s3:authType](#amazons3-s3_authType)
[s3:ResourceAccount](#amazons3-s3_ResourceAccount)
[s3:signatureAge](#amazons3-s3_signatureAge)
[s3:signatureversion](#amazons3-s3_signatureversion)
[s3:TlsVersion](#amazons3-s3_TlsVersion)
[s3:x-amz-content-sha256](#amazons3-s3_x-amz-content-sha256) / **相关操作:**
## Amazon S3 定义的资源类型
以下资源类型是由该服务定义的，可以在 IAM 权限策略语句的 `Resource` 元素中使用这些资源类型。[操作表](#amazons3-actions-as-permissions)中的每个操作指定了可以使用该操作指定的资源类型。您也可以在策略中包含条件键，从而定义资源类型。这些键显示在资源类型表的最后一列。有关下表中各列的详细信息，请参阅[资源类型表](reference_policies_actions-resources-contextkeys.html#resources_table)。
****
| 资源类型 | ARN | 条件键 |
| --- | --- | --- |
| [accesspoint](https://docs.aws.amazon.com/AmazonS3/latest/userguide/access-points.html) | arn:${Partition}:s3:${Region}:${Account}:accesspoint/${AccessPointName} | [aws:ResourceTag/${TagKey}](#amazons3-aws_ResourceTag___TagKey_)
[s3:AccessPointNetworkOrigin](#amazons3-s3_AccessPointNetworkOrigin)
[s3:AccessPointTag/${TagKey}](#amazons3-s3_AccessPointTag___TagKey_)
[s3:DataAccessPointAccount](#amazons3-s3_DataAccessPointAccount)
[s3:DataAccessPointArn](#amazons3-s3_DataAccessPointArn) |
| [accesspointobject](https://docs.aws.amazon.com/AmazonS3/latest/userguide/access-points.html) | arn:${Partition}:s3:${Region}:${Account}:accesspoint/${AccessPointName}/object/${ObjectName} | [aws:ResourceTag/${TagKey}](#amazons3-aws_ResourceTag___TagKey_)
[s3:AccessPointNetworkOrigin](#amazons3-s3_AccessPointNetworkOrigin)
[s3:AccessPointTag/${TagKey}](#amazons3-s3_AccessPointTag___TagKey_)
[s3:BucketTag/${TagKey}](#amazons3-s3_BucketTag___TagKey_)
[s3:DataAccessPointAccount](#amazons3-s3_DataAccessPointAccount)
[s3:DataAccessPointArn](#amazons3-s3_DataAccessPointArn) |
| [bucket](https://docs.aws.amazon.com/AmazonS3/latest/userguide/UsingBucket.html) | arn:${Partition}:s3:::${BucketName} | [aws:ResourceTag/${TagKey}](#amazons3-aws_ResourceTag___TagKey_)
[s3:BucketTag/${TagKey}](#amazons3-s3_BucketTag___TagKey_) |
| [object](https://docs.aws.amazon.com/AmazonS3/latest/userguide/UsingObjects.html) | arn:${Partition}:s3:::${BucketName}/${ObjectName} | [aws:ResourceTag/${TagKey}](#amazons3-aws_ResourceTag___TagKey_)
[s3:BucketTag/${TagKey}](#amazons3-s3_BucketTag___TagKey_) |
| [job](https://docs.aws.amazon.com/AmazonS3/latest/userguide/batch-ops-managing-jobs.html) | arn:${Partition}:s3:${Region}:${Account}:job/${JobId} | [aws:RequestTag/${TagKey}](#amazons3-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#amazons3-aws_ResourceTag___TagKey_)
[aws:TagKeys](#amazons3-aws_TagKeys) |
| [storagelensconfiguration](https://docs.aws.amazon.com/AmazonS3/latest/userguide/storage_lens.html) | arn:${Partition}:s3:${Region}:${Account}:storage-lens/${ConfigId} | [aws:RequestTag/${TagKey}](#amazons3-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#amazons3-aws_ResourceTag___TagKey_)
[aws:TagKeys](#amazons3-aws_TagKeys) |
| [storagelensgroup](https://docs.aws.amazon.com/AmazonS3/latest/userguide/storage_lens_group.html) | arn:${Partition}:s3:${Region}:${Account}:storage-lens-group/${Name} | [aws:RequestTag/${TagKey}](#amazons3-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#amazons3-aws_ResourceTag___TagKey_)
[aws:TagKeys](#amazons3-aws_TagKeys) |
| [objectlambdaaccesspoint](https://docs.aws.amazon.com/AmazonS3/latest/userguide/transforming-objects.html) | arn:${Partition}:s3-object-lambda:${Region}:${Account}:accesspoint/${AccessPointName} | |
| [multiregionaccesspoint](https://docs.aws.amazon.com/AmazonS3/latest/userguide/MultiRegionAccessPointRequests.html) | arn:${Partition}:s3::${Account}:accesspoint/${AccessPointAlias} | |
| [multiregionaccesspointrequestarn](https://docs.aws.amazon.com/AmazonS3/latest/userguide/MultiRegionAccessPointRequests.html) | arn:${Partition}:s3:us-west-2:${Account}:async-request/mrap/${Operation}/${Token} | |
| [accessgrantsinstance](https://docs.aws.amazon.com/AmazonS3/latest/userguide/access-grants-instance.html) | arn:${Partition}:s3:${Region}:${Account}:access-grants/default | [aws:RequestTag/${TagKey}](#amazons3-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#amazons3-aws_ResourceTag___TagKey_)
[aws:TagKeys](#amazons3-aws_TagKeys) |
| [accessgrantslocation](https://docs.aws.amazon.com/AmazonS3/latest/userguide/access-grants-location.html) | arn:${Partition}:s3:${Region}:${Account}:access-grants/default/location/${Token} | [aws:RequestTag/${TagKey}](#amazons3-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#amazons3-aws_ResourceTag___TagKey_)
[aws:TagKeys](#amazons3-aws_TagKeys) |
| [accessgrant](https://docs.aws.amazon.com/AmazonS3/latest/userguide/access-grants-grant.html) | arn:${Partition}:s3:${Region}:${Account}:access-grants/default/grant/${Token} | [aws:RequestTag/${TagKey}](#amazons3-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#amazons3-aws_ResourceTag___TagKey_)
[aws:TagKeys](#amazons3-aws_TagKeys) |
## Amazon S3 的条件键
Amazon S3 定义以下可以在 IAM 策略的 `Condition` 元素中使用的条件键。您可以使用这些键进一步细化应用策略语句的条件。有关下表中各列的详细信息，请参阅[条件键表](reference_policies_actions-resources-contextkeys.html#context_keys_table)。
要查看适用于所有服务的全局条件键，请参阅 [AWS 全局条件上下文键](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html)。
****
| 条件键 | 描述 | 类型 |
| --- | --- | --- |
| [aws:RequestTag/${TagKey}](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-requesttag) | 按请求中传递的标签筛选访问权限 | 字符串 |
| [aws:ResourceTag/${TagKey}](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-resourcetag) | 按与资源关联的标签筛选访问权限 | 字符串 |
| [aws:TagKeys](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-tagkeys) | 按请求中传递的标签键筛选访问权限 | ArrayOfString |
| [s3:AccessGrantScope](https://docs.aws.amazon.com/AmazonS3/latest/userguide/access-grants-grant.html) | 按访问权限授予授权的授权范围筛选访问权限 | 字符串 |
| [s3:AccessGrantsInstanceArn](https://docs.aws.amazon.com/AmazonS3/latest/userguide/access-grants-instance.html) | 按访问授权实例 ARN 筛选访问权限 | 进行筛选 |
| [s3:AccessGrantsLocationScope](https://docs.aws.amazon.com/AmazonS3/latest/userguide/access-grants-location.html) | 按访问权限授予位置的位置范围筛选访问权限 | 字符串 |
| [s3:AccessPointNetworkOrigin](https://docs.aws.amazon.com/AmazonS3/latest/userguide/creating-access-points.html#access-points-policies) | 按网络源（Internet 或 VPC）筛选访问 | 字符串 |
| [s3:AccessPointTag/${TagKey}](https://docs.aws.amazon.com/AmazonS3/latest/userguide/access-points.html#tagging-and-policies) | 按现有接入点标签键和值筛选访问权限 | 字符串 |
| [s3:BucketTag/${TagKey}](https://docs.aws.amazon.com/AmazonS3/latest/userguide/buckets-tagging.html) | 按与存储桶关联的标签筛选访问权限 | 字符串 |
| [s3:DataAccessPointAccount](https://docs.aws.amazon.com/AmazonS3/latest/userguide/creating-access-points.html#access-points-policies) | 按拥有接入点的 AWS 账户 ID 筛选访问权限 | 字符串 |
| [s3:DataAccessPointArn](https://docs.aws.amazon.com/AmazonS3/latest/userguide/creating-access-points.html#access-points-policies) | 按接入点 Amazon Resource Name（ARN）筛选访问 | 进行筛选 |
| [s3:ExistingJobOperation](https://docs.aws.amazon.com/AmazonS3/latest/userguide/batch-ops-job-tags-examples.html) | 按操作筛选访问权限以更新任务优先级 | 字符串 |
| [s3:ExistingJobPriority](https://docs.aws.amazon.com/AmazonS3/latest/userguide/batch-ops-job-tags-examples.html) | 按优先级范围筛选访问权限以取消现有任务 | 数值 |
| [s3:ExistingObjectTag/](https://docs.aws.amazon.com/AmazonS3/latest/userguide/object-tagging.html#tagging-and-policies) | 按现有对象标签键和值筛选访问 | 字符串 |
| [s3:InventoryAccessibleOptionalFields](https://docs.aws.amazon.com/AmazonS3/latest/userguide/example-bucket-policies.html#example-bucket-policies-s3-inventory-2) | 通过限制用户在配置 S3 清单报告时可以添加的可选元数据字段来筛选访问权限 | ArrayOfString |
| [s3:JobSuspendedCause](https://docs.aws.amazon.com/AmazonS3/latest/userguide/batch-ops-job-tags-examples.html) | 按特定的任务暂停原因（例如，AWAITING\_CONFIRMATION）筛选取消暂停的任务的访问权限 | 字符串 |
| [s3:ObjectCreationOperation](https://docs.aws.amazon.com/AmazonS3/latest/userguide/conditional-writes-enforce.html) | 按操作是否创建对象筛选访问权限 | 布尔型 |
| [s3:RequestJobOperation](https://docs.aws.amazon.com/AmazonS3/latest/userguide/batch-ops-job-tags-examples.html) | 按操作筛选访问权限以创建任务 | 字符串 |
| [s3:RequestJobPriority](https://docs.aws.amazon.com/AmazonS3/latest/userguide/batch-ops-job-tags-examples.html) | 按优先级范围筛选访问权限以创建新任务 | 数值 |
| [s3:RequestObjectTag/](https://docs.aws.amazon.com/AmazonS3/latest/userguide/object-tagging.html#tagging-and-policies) | 按要添加到对象的标签键和值筛选访问 | 字符串 |
| [s3:RequestObjectTagKeys](https://docs.aws.amazon.com/AmazonS3/latest/userguide/object-tagging.html#tagging-and-policies) | 按要添加到对象的标签键筛选访问 | ArrayOfString |
| [s3:ResourceAccount](https://docs.aws.amazon.com/AmazonS3/latest/userguide/amazon-s3-policy-keys.html#example-object-resource-account) | 按资源所有者 AWS 账户 ID 筛选访问权限 | 字符串 |
| [s3:TlsVersion](https://docs.aws.amazon.com/AmazonS3/latest/userguide/amazon-s3-policy-keys.html#example-object-tls-version) | 按客户端使用的 TLS 版本筛选访问 | 数值 |
| [s3:annotation-prefix](https://docs.aws.amazon.com/AmazonS3/latest/userguide/amazon-s3-policy-keys.html#example-annotation-prefix-condition) | 按请求中指定的注释名称前缀筛选访问权限 | 字符串 |
| [s3:authType](https://docs.aws.amazon.com/AmazonS3/latest/API/bucket-policy-s3-sigv4-conditions.html) | 按身份验证方法筛选访问 | 字符串 |
| [s3:delimiter](https://docs.aws.amazon.com/AmazonS3/latest/userguide/walkthrough1.html) | 按分隔符参数筛选访问 | 字符串 |
| [s3:deliverySourceArn](https://docs.aws.amazon.com/AmazonS3/latest/userguide/ServerLogs.html) | 按特定配送来源筛选访问权限亚马逊资源名称 (ARN) | 进行筛选 |
| [s3:destinationRegion](https://docs.aws.amazon.com/AmazonS3/latest/userguide/replication.html) | 按特定复制目标区域筛选 FIS 操作的目标存储桶的访问权限 aws: s3: bucket-pause-re AWS plication | 字符串 |
| [s3:if-match](https://docs.aws.amazon.com/AmazonS3/latest/userguide/conditional-writes-enforce.html) | 按请求的 “If-Match” 条件标头筛选访问权限 | 字符串 |
| [s3:if-none-match](https://docs.aws.amazon.com/AmazonS3/latest/userguide/conditional-writes-enforce.html) | 按请求的 “If-None-Match” 条件标头筛选访问权限 | 字符串 |
| [s3:isReplicationPauseRequest](https://docs.aws.amazon.com/fis/latest/userguide/security_iam_id-based-policy-examples.html#security-iam-policy-examples-s3) | 按通过 AWS FIS 操作发出的请求筛选访问权限 aws: s3: bucket-pause-replication | 布尔型 |
| [s3:locationconstraint](https://docs.aws.amazon.com/AmazonS3/latest/userguide/amazon-s3-policy-keys.html#condition-key-bucket-ops-1) | 按特定区域筛选访问 | 字符串 |
| [s3:logType](https://docs.aws.amazon.com/AmazonS3/latest/userguide/ServerLogs.html) | 按特定日志类型筛选访问权限，目前支持 S3\_SERVER\_ACCESS\_LOGS | 字符串 |
| [s3:max-annotation-results](https://docs.aws.amazon.com/AmazonS3/latest/userguide/amazon-s3-policy-keys.html#example-annotation-max-results) | 按请求的最大注释结果数筛选访问权限 | 数值 |
| [s3:max-keys](https://docs.aws.amazon.com/AmazonS3/latest/userguide/amazon-s3-policy-keys.html#example-numeric-condition-operators) | 按 ListBucket 请求中返回的最大密钥数筛选访问权限 | 数值 |
| [s3:object-lock-legal-hold](https://docs.aws.amazon.com/AmazonS3/latest/userguide/object-lock-overview.html#object-lock-legal-holds) | 按对象合法保留状态筛选访问 | 字符串 |
| [s3:object-lock-mode](https://docs.aws.amazon.com/AmazonS3/latest/userguide/object-lock-overview.html#object-lock-retention-modes) | 按对象保留模式（COMPLIANCE 或 GOVERNANCE）筛选访问 | 字符串 |
| [s3:object-lock-remaining-retention-days](https://docs.aws.amazon.com/AmazonS3/latest/userguide/object-lock-managing.html#object-lock-managing-retention-limits) | 按剩余对象保留天数筛选访问 | 数值 |
| [s3:object-lock-retain-until-date](https://docs.aws.amazon.com/AmazonS3/latest/userguide/object-lock-overview.html#object-lock-retention-periods) | 按对象保留截止日期筛选访问 | 日期 |
| [s3:prefix](https://docs.aws.amazon.com/AmazonS3/latest/userguide/amazon-s3-policy-keys.html#condition-key-bucket-ops-2) | 按键名称前缀筛选访问 | 字符串 |
| [s3:resourceArnBeingAuthorized](https://docs.aws.amazon.com/AmazonS3/latest/userguide/ServerLogs.html) | 按源存储桶筛选访问权限亚马逊资源名称 (ARN) | 进行筛选 |
| [s3:signatureAge](https://docs.aws.amazon.com/AmazonS3/latest/API/bucket-policy-s3-sigv4-conditions.html) | 按请求签名的生存期（以毫秒为单位）筛选访问 | 数值 |
| [s3:signatureversion](https://docs.aws.amazon.com/AmazonS3/latest/API/bucket-policy-s3-sigv4-conditions.html) | 根据请求中使用的 AWS 签名版本筛选访问权限 | 字符串 |
| [s3:versionid](https://docs.aws.amazon.com/AmazonS3/latest/userguide/amazon-s3-policy-keys.html#getobjectversion-limit-access-to-specific-version-3) | 按特定对象版本筛选访问权限 | 字符串 |
| [s3:x-amz-acl](https://docs.aws.amazon.com/AmazonS3/latest/userguide/acl-overview.html#permissions) | 按请求的 x-amz-acl 标头中的标准 ACL 筛选访问 | 字符串 |
| [s3:x-amz-bucket-namespace](https://docs.aws.amazon.com/AmazonS3/latest/userguide/gpbucketnamespaces.html) | 按通用存储桶命名空间类型筛选访问权限 | 字符串 |
| [s3:x-amz-content-sha256](https://docs.aws.amazon.com/AmazonS3/latest/API/bucket-policy-s3-sigv4-conditions.html) | 按存储桶中未签名内容筛选访问权限 | 字符串 |
| [s3:x-amz-copy-source](https://docs.aws.amazon.com/AmazonS3/latest/userguide/amazon-s3-policy-keys.html#putobject-limit-copy-source-3) | 按复制对象请求中的复制源存储桶、前缀或对象筛选访问权限 | 字符串 |
| [s3:x-amz-grant-full-control](https://docs.aws.amazon.com/AmazonS3/latest/userguide/acl-overview.html#permissions) | 按 x-amz-grant-full-control（完全控制）标头筛选访问权限 | 字符串 |
| [s3:x-amz-grant-read](https://docs.aws.amazon.com/AmazonS3/latest/userguide/acl-overview.html#permissions) | 按 x-amz-grant-read（读取访问权限）标头筛选访问权限 | 字符串 |
| [s3:x-amz-grant-read-acp](https://docs.aws.amazon.com/AmazonS3/latest/userguide/acl-overview.html#permissions) | 按 x-amz-grant-read-acp（对于 ACL 的读取权限）标头筛选访问权限 | 字符串 |
| [s3:x-amz-grant-write](https://docs.aws.amazon.com/AmazonS3/latest/userguide/acl-overview.html#permissions) | 按 x-amz-grant-write（写入访问权限）标头筛选访问权限 | 字符串 |
| [s3:x-amz-grant-write-acp](https://docs.aws.amazon.com/AmazonS3/latest/userguide/acl-overview.html#permissions) | 按 x-amz-grant-write-acp（对于 ACL 的写入权限）标头筛选访问权限 | 字符串 |
| [s3:x-amz-metadata-directive](https://docs.aws.amazon.com/AmazonS3/latest/API/API_CopyObject.html) | 按复制对象时的对象元数据行为（COPY 或 REPLACE）来筛选访问 | 字符串 |
| [s3:x-amz-object-annotation-directive](https://docs.aws.amazon.com/AmazonS3/latest/API/API_CopyObject.html) | 通过请求中指定的注释复制指令筛选访问权限 | 字符串 |
| [s3:x-amz-object-if-match](https://docs.aws.amazon.com/AmazonS3/latest/userguide/amazon-s3-policy-keys.html#example-annotation-conditional-writes) | 按请求中指定的对象版本的 ETag 筛选访问权限 | 字符串 |
| [s3:x-amz-object-ownership](https://docs.aws.amazon.com/AmazonS3/latest/userguide/ensure-object-ownership.html#object-ownership-requiring-bucket-owner-enforced) | 按对象所有权筛选访问权限 | 字符串 |
| [s3:x-amz-server-side-encryption](https://docs.aws.amazon.com/AmazonS3/latest/userguide/UsingServerSideEncryption.html) | 通过服务器端加密来筛选访问 | 字符串 |
| [s3:x-amz-server-side-encryption-aws-kms-key-id](https://docs.aws.amazon.com/AmazonS3/latest/userguide/UsingKMSEncryption.html#require-sse-kms) | 筛选 AWS KMS 客户托管 CMK 的访问权限以进行服务器端加密 | 进行筛选 |
| [s3:x-amz-server-side-encryption-customer-algorithm](https://docs.aws.amazon.com/AmazonS3/latest/userguide/ServerSideEncryptionCustomerKeys.html) | 按客户指定的服务器端加密算法筛选访问权限 | 字符串 |
| [s3:x-amz-storage-class](https://docs.aws.amazon.com/AmazonS3/latest/userguide/storage-class-intro.html#sc-howtoset) | 按存储类筛选访问权限 | 字符串 |
| [s3:x-amz-website-redirect-location](https://docs.aws.amazon.com/AmazonS3/latest/userguide/how-to-page-redirect.html#page-redirect-using-rest-api) | 针对配置为静态网站的存储桶，按特定网站重定向位置筛选访问 | 字符串 |