Die vorliegende Übersetzung wurde maschinell erstellt. Im Falle eines Konflikts oder eines Widerspruchs zwischen dieser übersetzten Fassung und der englischen Fassung (einschließlich infolge von Verzögerungen bei der Übersetzung) ist die englische Fassung maßgeblich.
# Aktionen, Ressourcen und Bedingungsschlüssel für Amazon S3
Amazon S3 (Dienstpräfix): `s3`) stellt die folgenden dienstspezifischen Operationen, Ressourcen, Aktionen und Bedingungsschlüssel zur Verwendung in IAM-Berechtigungsrichtlinien bereit.
Referenzen:
+ Erfahren Sie, wie Sie [diesen Service konfigurieren](https://docs.aws.amazon.com/AmazonS3/latest/userguide/Welcome.html).
+ Zeigen Sie eine Liste der [API-Vorgänge an, die für diesen Service verfügbar sind](https://docs.aws.amazon.com/AmazonS3/latest/API/).
+ Erfahren Sie, wie Sie diesen Service und seine Ressourcen [mithilfe von IAM](https://docs.aws.amazon.com/AmazonS3/latest/userguide/access-control-overview.html)-Berechtigungsrichtlinien schützen.
+ Sehen Sie sich das an [Referenz zur programmatischen Serviceautorisierung](https://servicereference.us-east-1.amazonaws.com/v1/s3/s3.json) für diesen Dienst.
**Topics**
+ [Von Amazon S3 definierte API-Operationen](#list_s3-operations)
+ [Von Amazon S3 definierte Aktionen](#list_s3-actions-as-permissions)
+ [Permission-only Aktionen für Amazon S3](#list_s3-permission-only-actions)
+ [Von Amazon S3 definierte Ressourcentypen](#list_s3-resources-for-iam-policies)
+ [Bedingungsschlüssel für Amazon S3](#list_s3-policy-keys)
## Von Amazon S3 definierte API-Operationen
In der folgenden Tabelle werden API-Operationen den IAM-Aktionen zugeordnet, die sie autorisieren. Es werden nur Bedingungsschlüssel aufgeführt, die statische Werte für die angegebene API und Aktion haben. Den vollständigen Satz der Bedingungsschlüssel, die von jeder Aktion unterstützt werden, finden Sie in der [Tabelle „Aktionen“](#list_s3-actions-as-permissions).
- ** AbortMultipartUpload **
- **SDK-Client:** s3
- **IAM-Aktion:** [s3:AbortMultipartUpload](#list_s3-action-AbortMultipartUpload) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Schreiben
- **IAM-Aktion:** [s3-object-lambda:AbortMultipartUpload](https://docs.aws.amazon.com/AmazonS3/latest/API/API_AbortMultipartUpload.html) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Schreiben
- ** CompleteMultipartUpload **
- **SDK-Client:** s3
- **IAM-Aktion:** [s3:PutObject](#list_s3-action-PutObject) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Schreiben
- **IAM-Aktion:** [s3-object-lambda:PutObject](https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutObject.html) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Schreiben
- ** CopyObject **
- **SDK-Client:** s3
- **IAM-Aktion:** [s3:GetObject](#list_s3-action-GetObject) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Lesen
- **IAM-Aktion:** [s3:GetObjectVersion](#list_s3-action-GetObjectVersion) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Lesen
- **IAM-Aktion:** [s3:PutObject](#list_s3-action-PutObject) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Write (Schreiben)
- **IAM-Aktion:** [s3:PutObjectAcl](#list_s3-action-PutObjectAcl) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Verwaltung von Berechtigungen, Schreiben
- **IAM-Aktion:** [s3:PutObjectLegalHold](#list_s3-action-PutObjectLegalHold) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Schreiben
- **IAM-Aktion:** [s3:PutObjectRetention](#list_s3-action-PutObjectRetention) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Schreiben
- **IAM-Aktion:** [s3:PutObjectTagging](#list_s3-action-PutObjectTagging) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Taggen, Schreiben
- **IAM-Aktion:** [s3-object-lambda:PutObject](https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutObject.html) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Schreiben
- ** CreateBucket **
- **SDK-Client:** s3
- **IAM-Aktion:** [s3:CreateBucket](#list_s3-action-CreateBucket) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Schreiben
- **IAM-Aktion:** [s3:PutBucketAcl](#list_s3-action-PutBucketAcl) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Verwaltung von Berechtigungen, Schreiben
- **IAM-Aktion:** [s3:PutBucketObjectLockConfiguration](#list_s3-action-PutBucketObjectLockConfiguration) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Schreiben
- **IAM-Aktion:** [s3:PutBucketOwnershipControls](#list_s3-action-PutBucketOwnershipControls) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Verwaltung von Berechtigungen, Schreiben
- **IAM-Aktion:** [s3:PutBucketVersioning](#list_s3-action-PutBucketVersioning) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Schreiben
- ** CreateBucketMetadataConfiguration **
- **SDK-Client:** s3
- **IAM-Aktion:** [s3:CreateBucketMetadataTableConfiguration](#list_s3-action-CreateBucketMetadataTableConfiguration) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Schreiben
- **IAM-Aktion:** [s3tables:CreateNamespace](https://docs.aws.amazon.com/AmazonS3/latest/API/API_s3Buckets_CreateNamespace.html) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Schreiben
- **IAM-Aktion:** [s3tables:CreateTable](https://docs.aws.amazon.com/AmazonS3/latest/API/API_s3Buckets_CreateTable.html) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Schreiben
- **IAM-Aktion:** [s3tables:CreateTableBucket](https://docs.aws.amazon.com/AmazonS3/latest/API/API_s3Buckets_CreateTableBucket.html) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Schreiben
- **IAM-Aktion:** [s3tables:GetTable](https://docs.aws.amazon.com/AmazonS3/latest/API/API_s3Buckets_GetTable.html) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Lesen
- **IAM-Aktion:** [s3tables:PutTableEncryption](https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-tables-setting-up.html#s3-tables-actions) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Write (Schreiben)
- **IAM-Aktion:** [s3tables:PutTablePolicy](https://docs.aws.amazon.com/AmazonS3/latest/API/API_s3Buckets_PutTablePolicy.html) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Verwaltung von Berechtigungen, Schreiben
- ** CreateBucketMetadataTableConfiguration **
- **SDK-Client:** s3
- **IAM-Aktion:** [s3:CreateBucketMetadataTableConfiguration](#list_s3-action-CreateBucketMetadataTableConfiguration) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Schreiben
- **IAM-Aktion:** [s3tables:CreateNamespace](https://docs.aws.amazon.com/AmazonS3/latest/API/API_s3Buckets_CreateNamespace.html) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Schreiben
- **IAM-Aktion:** [s3tables:CreateTable](https://docs.aws.amazon.com/AmazonS3/latest/API/API_s3Buckets_CreateTable.html) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Schreiben
- **IAM-Aktion:** [s3tables:GetTable](https://docs.aws.amazon.com/AmazonS3/latest/API/API_s3Buckets_GetTable.html) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Lesen
- **IAM-Aktion:** [s3tables:PutTablePolicy](https://docs.aws.amazon.com/AmazonS3/latest/API/API_s3Buckets_PutTablePolicy.html) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Verwaltung von Berechtigungen, Schreiben
- ** CreateMultipartUpload **
- **SDK-Client:** s3
- **IAM-Aktion:** [s3:PutObject](#list_s3-action-PutObject) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Schreiben
- **IAM-Aktion:** [s3:PutObjectAcl](#list_s3-action-PutObjectAcl) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Verwaltung von Berechtigungen, Schreiben
- **IAM-Aktion:** [s3:PutObjectLegalHold](#list_s3-action-PutObjectLegalHold) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Schreiben
- **IAM-Aktion:** [s3:PutObjectRetention](#list_s3-action-PutObjectRetention) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Schreiben
- **IAM-Aktion:** [s3:PutObjectTagging](#list_s3-action-PutObjectTagging) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Taggen, Schreiben
- **IAM-Aktion:** [s3-object-lambda:PutObject](https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutObject.html) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Schreiben
- ** DeleteBucket **
- **SDK-Client:** s3
- **IAM-Aktion:** [s3:DeleteBucket](#list_s3-action-DeleteBucket)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Schreiben
- ** DeleteBucketAnalyticsConfiguration **
- **SDK-Client:** s3
- **IAM-Aktion:** [s3:PutAnalyticsConfiguration](#list_s3-action-PutAnalyticsConfiguration)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Schreiben
- ** DeleteBucketCors **
- **SDK-Client:** s3
- **IAM-Aktion:** [s3:PutBucketCORS](#list_s3-action-PutBucketCORS)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Schreiben
- ** DeleteBucketEncryption **
- **SDK-Client:** s3
- **IAM-Aktion:** [s3:PutEncryptionConfiguration](#list_s3-action-PutEncryptionConfiguration)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Schreiben
- ** DeleteBucketIntelligentTieringConfiguration **
- **SDK-Client:** s3
- **IAM-Aktion:** [s3:PutIntelligentTieringConfiguration](#list_s3-action-PutIntelligentTieringConfiguration)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Schreiben
- ** DeleteBucketInventoryConfiguration **
- **SDK-Client:** s3
- **IAM-Aktion:** [s3:PutInventoryConfiguration](#list_s3-action-PutInventoryConfiguration)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Schreiben
- ** DeleteBucketLifecycle **
- **SDK-Client:** s3
- **IAM-Aktion:** [s3:PutLifecycleConfiguration](#list_s3-action-PutLifecycleConfiguration)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Schreiben
- ** DeleteBucketMetadataConfiguration **
- **SDK-Client:** s3
- **IAM-Aktion:** [s3:DeleteBucketMetadataTableConfiguration](#list_s3-action-DeleteBucketMetadataTableConfiguration)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Schreiben
- ** DeleteBucketMetadataTableConfiguration **
- **SDK-Client:** s3
- **IAM-Aktion:** [s3:DeleteBucketMetadataTableConfiguration](#list_s3-action-DeleteBucketMetadataTableConfiguration)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Schreiben
- ** DeleteBucketMetricsConfiguration **
- **SDK-Client:** s3
- **IAM-Aktion:** [s3:PutMetricsConfiguration](#list_s3-action-PutMetricsConfiguration)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Schreiben
- ** DeleteBucketOwnershipControls **
- **SDK-Client:** s3
- **IAM-Aktion:** [s3:PutBucketOwnershipControls](#list_s3-action-PutBucketOwnershipControls)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Verwaltung von Berechtigungen, Schreiben
- ** DeleteBucketPolicy **
- **SDK-Client:** s3
- **IAM-Aktion:** [s3:DeleteBucketPolicy](#list_s3-action-DeleteBucketPolicy)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Verwaltung von Berechtigungen, Schreiben
- ** DeleteBucketReplication **
- **SDK-Client:** s3
- **IAM-Aktion:** [s3:PutReplicationConfiguration](#list_s3-action-PutReplicationConfiguration)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Schreiben
- ** DeleteBucketTagging **
- **SDK-Client:** s3
- **IAM-Aktion:** [s3:PutBucketTagging](#list_s3-action-PutBucketTagging)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Taggen, Schreiben
- ** DeleteBucketWebsite **
- **SDK-Client:** s3
- **IAM-Aktion:** [s3:DeleteBucketWebsite](#list_s3-action-DeleteBucketWebsite)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Schreiben
- ** DeleteObject **
- **SDK-Client:** s3
- **IAM-Aktion:** [s3:BypassGovernanceRetention](#list_s3-action-BypassGovernanceRetention) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Verwaltung von Berechtigungen, Schreiben
- **IAM-Aktion:** [s3:DeleteObject](#list_s3-action-DeleteObject) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Schreiben
- **IAM-Aktion:** [s3:DeleteObjectVersion](#list_s3-action-DeleteObjectVersion) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Schreiben
- **IAM-Aktion:** [s3-object-lambda:DeleteObject](https://docs.aws.amazon.com/AmazonS3/latest/API/API_DeleteObject.html) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Schreiben
- ** DeleteObjectTagging **
- **SDK-Client:** s3
- **IAM-Aktion:** [s3:DeleteObjectTagging](#list_s3-action-DeleteObjectTagging) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Taggen, Schreiben
- **IAM-Aktion:** [s3:DeleteObjectVersionTagging](#list_s3-action-DeleteObjectVersionTagging) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Taggen, Schreiben
- **IAM-Aktion:** [s3-object-lambda:DeleteObjectTagging](https://docs.aws.amazon.com/AmazonS3/latest/API/API_DeleteObjectTagging.html) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Taggen, Schreiben
- ** DeleteObjects **
- **SDK-Client:** s3
- **IAM-Aktion:** [s3:BypassGovernanceRetention](#list_s3-action-BypassGovernanceRetention) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Verwaltung von Berechtigungen, Schreiben
- **IAM-Aktion:** [s3:DeleteObject](#list_s3-action-DeleteObject) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Schreiben
- **IAM-Aktion:** [s3:DeleteObjectVersion](#list_s3-action-DeleteObjectVersion) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Schreiben
- ** DeletePublicAccessBlock **
- **SDK-Client:** s3
- **IAM-Aktion:** [s3:PutBucketPublicAccessBlock](#list_s3-action-PutBucketPublicAccessBlock)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Verwaltung von Berechtigungen, Schreiben
- ** GetBucketAccelerateConfiguration **
- **SDK-Client:** s3
- **IAM-Aktion:** [s3:GetAccelerateConfiguration](#list_s3-action-GetAccelerateConfiguration)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Lesen
- ** GetBucketAcl **
- **SDK-Client:** s3
- **IAM-Aktion:** [s3:GetBucketAcl](#list_s3-action-GetBucketAcl)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Lesen
- ** GetBucketAnalyticsConfiguration **
- **SDK-Client:** s3
- **IAM-Aktion:** [s3:GetAnalyticsConfiguration](#list_s3-action-GetAnalyticsConfiguration)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Lesen
- ** GetBucketCors **
- **SDK-Client:** s3
- **IAM-Aktion:** [s3:GetBucketCORS](#list_s3-action-GetBucketCORS)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Lesen
- ** GetBucketEncryption **
- **SDK-Client:** s3
- **IAM-Aktion:** [s3:GetEncryptionConfiguration](#list_s3-action-GetEncryptionConfiguration)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Lesen
- ** GetBucketIntelligentTieringConfiguration **
- **SDK-Client:** s3
- **IAM-Aktion:** [s3:GetIntelligentTieringConfiguration](#list_s3-action-GetIntelligentTieringConfiguration)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Lesen
- ** GetBucketInventoryConfiguration **
- **SDK-Client:** s3
- **IAM-Aktion:** [s3:GetInventoryConfiguration](#list_s3-action-GetInventoryConfiguration)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Lesen
- ** GetBucketLifecycle **
- **SDK-Client:** s3
- **IAM-Aktion:** [s3:GetLifecycleConfiguration](#list_s3-action-GetLifecycleConfiguration)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Lesen
- ** GetBucketLifecycleConfiguration **
- **SDK-Client:** s3
- **IAM-Aktion:** [s3:GetLifecycleConfiguration](#list_s3-action-GetLifecycleConfiguration) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Lesen
- **IAM-Aktion:** [s3express:GetLifecycleConfiguration](https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketLifecycleConfiguration.html) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Lesen
- ** GetBucketLocation **
- **SDK-Client:** s3
- **IAM-Aktion:** [s3:GetBucketLocation](#list_s3-action-GetBucketLocation)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Lesen
- ** GetBucketLogging **
- **SDK-Client:** s3
- **IAM-Aktion:** [s3:GetBucketLogging](#list_s3-action-GetBucketLogging)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Lesen
- ** GetBucketMetadataConfiguration **
- **SDK-Client:** s3
- **IAM-Aktion:** [s3:GetBucketMetadataTableConfiguration](#list_s3-action-GetBucketMetadataTableConfiguration)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Lesen
- ** GetBucketMetadataTableConfiguration **
- **SDK-Client:** s3
- **IAM-Aktion:** [s3:GetBucketMetadataTableConfiguration](#list_s3-action-GetBucketMetadataTableConfiguration)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Lesen
- ** GetBucketMetricsConfiguration **
- **SDK-Client:** s3
- **IAM-Aktion:** [s3:GetMetricsConfiguration](#list_s3-action-GetMetricsConfiguration)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Lesen
- ** GetBucketNotification **
- **SDK-Client:** s3
- **IAM-Aktion:** [s3:GetBucketNotification](#list_s3-action-GetBucketNotification)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Lesen
- ** GetBucketNotificationConfiguration **
- **SDK-Client:** s3
- **IAM-Aktion:** [s3:GetBucketNotification](#list_s3-action-GetBucketNotification)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Lesen
- ** GetBucketOwnershipControls **
- **SDK-Client:** s3
- **IAM-Aktion:** [s3:GetBucketOwnershipControls](#list_s3-action-GetBucketOwnershipControls)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Lesen
- ** GetBucketPolicy **
- **SDK-Client:** s3
- **IAM-Aktion:** [s3:GetBucketPolicy](#list_s3-action-GetBucketPolicy)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Lesen
- ** GetBucketPolicyStatus **
- **SDK-Client:** s3
- **IAM-Aktion:** [s3:GetBucketPolicyStatus](#list_s3-action-GetBucketPolicyStatus)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Lesen
- ** GetBucketReplication **
- **SDK-Client:** s3
- **IAM-Aktion:** [s3:GetReplicationConfiguration](#list_s3-action-GetReplicationConfiguration)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Lesen
- ** GetBucketRequestPayment **
- **SDK-Client:** s3
- **IAM-Aktion:** [s3:GetBucketRequestPayment](#list_s3-action-GetBucketRequestPayment)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Lesen
- ** GetBucketTagging **
- **SDK-Client:** s3
- **IAM-Aktion:** [s3:GetBucketTagging](#list_s3-action-GetBucketTagging)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Lesen
- ** GetBucketVersioning **
- **SDK-Client:** s3
- **IAM-Aktion:** [s3:GetBucketVersioning](#list_s3-action-GetBucketVersioning)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Lesen
- ** GetBucketWebsite **
- **SDK-Client:** s3
- **IAM-Aktion:** [s3:GetBucketWebsite](#list_s3-action-GetBucketWebsite)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Lesen
- ** GetObject **
- **SDK-Client:** s3
- **IAM-Aktion:** [s3:GetObject](#list_s3-action-GetObject) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Lesen
- **IAM-Aktion:** [s3:GetObjectLegalHold](#list_s3-action-GetObjectLegalHold) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Lesen
- **IAM-Aktion:** [s3:GetObjectRetention](#list_s3-action-GetObjectRetention) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Lesen
- **IAM-Aktion:** [s3:GetObjectTagging](#list_s3-action-GetObjectTagging) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Lesen
- **IAM-Aktion:** [s3:GetObjectVersion](#list_s3-action-GetObjectVersion) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Lesen
- **IAM-Aktion:** [s3-object-lambda:GetObject](https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetObject.html) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Lesen
- ** GetObjectAcl **
- **SDK-Client:** s3
- **IAM-Aktion:** [s3:GetObjectAcl](#list_s3-action-GetObjectAcl) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Lesen
- **IAM-Aktion:** [s3:GetObjectVersionAcl](#list_s3-action-GetObjectVersionAcl) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Lesen
- **IAM-Aktion:** [s3-object-lambda:GetObjectAcl](https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetObjectAcl.html) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Lesen
- ** GetObjectAttributes **
- **SDK-Client:** s3
- **IAM-Aktion:** [s3:GetObject](#list_s3-action-GetObject) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Lesen
- **IAM-Aktion:** [s3:GetObjectVersion](#list_s3-action-GetObjectVersion) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Lesen
- ** GetObjectLegalHold **
- **SDK-Client:** s3
- **IAM-Aktion:** [s3:GetObjectLegalHold](#list_s3-action-GetObjectLegalHold) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Lesen
- **IAM-Aktion:** [s3-object-lambda:GetObjectLegalHold](https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetObjectLegalHold.html) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Lesen
- ** GetObjectLockConfiguration **
- **SDK-Client:** s3
- **IAM-Aktion:** [s3:GetBucketObjectLockConfiguration](#list_s3-action-GetBucketObjectLockConfiguration)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Lesen
- ** GetObjectRetention **
- **SDK-Client:** s3
- **IAM-Aktion:** [s3:GetObjectRetention](#list_s3-action-GetObjectRetention) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Lesen
- **IAM-Aktion:** [s3-object-lambda:GetObjectRetention](https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetObjectRetention.html) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Lesen
- ** GetObjectTagging **
- **SDK-Client:** s3
- **IAM-Aktion:** [s3:GetObjectTagging](#list_s3-action-GetObjectTagging) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Lesen
- **IAM-Aktion:** [s3:GetObjectVersionTagging](#list_s3-action-GetObjectVersionTagging) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Lesen
- **IAM-Aktion:** [s3-object-lambda:GetObjectTagging](https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetObjectTagging.html) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Lesen
- ** GetObjectTorrent **
- **SDK-Client:** s3
- **IAM-Aktion:** [s3:GetObject](#list_s3-action-GetObject)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Lesen
- ** GetPublicAccessBlock **
- **SDK-Client:** s3
- **IAM-Aktion:** [s3:GetBucketPublicAccessBlock](#list_s3-action-GetBucketPublicAccessBlock)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Lesen
- ** HeadBucket **
- **SDK-Client:** s3
- **IAM-Aktion:** [s3:ListBucket](#list_s3-action-ListBucket)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Auflisten
- ** HeadObject **
- **SDK-Client:** s3
- **IAM-Aktion:** [s3:GetObject](#list_s3-action-GetObject) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Lesen
- **IAM-Aktion:** [s3:GetObjectLegalHold](#list_s3-action-GetObjectLegalHold) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Lesen
- **IAM-Aktion:** [s3:GetObjectRetention](#list_s3-action-GetObjectRetention) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Lesen
- **IAM-Aktion:** [s3-object-lambda:GetObject](https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetObject.html) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Lesen
- ** ListBucketAnalyticsConfigurations **
- **SDK-Client:** s3
- **IAM-Aktion:** [s3:GetAnalyticsConfiguration](#list_s3-action-GetAnalyticsConfiguration)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Lesen
- ** ListBucketIntelligentTieringConfigurations **
- **SDK-Client:** s3
- **IAM-Aktion:** [s3:GetIntelligentTieringConfiguration](#list_s3-action-GetIntelligentTieringConfiguration)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Lesen
- ** ListBucketInventoryConfigurations **
- **SDK-Client:** s3
- **IAM-Aktion:** [s3:GetInventoryConfiguration](#list_s3-action-GetInventoryConfiguration)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Lesen
- ** ListBucketMetricsConfigurations **
- **SDK-Client:** s3
- **IAM-Aktion:** [s3:GetMetricsConfiguration](#list_s3-action-GetMetricsConfiguration)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Lesen
- ** ListBuckets **
- **SDK-Client:** s3
- **IAM-Aktion:** [s3:ListAllMyBuckets](#list_s3-action-ListAllMyBuckets)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Auflisten
- ** ListMultipartUploads **
- **SDK-Client:** s3
- **IAM-Aktion:** [s3:ListBucketMultipartUploads](#list_s3-action-ListBucketMultipartUploads) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Auflisten
- **IAM-Aktion:** [s3-object-lambda:ListBucketMultipartUploads](https://docs.aws.amazon.com/AmazonS3/latest/API/API_ListMultipartUploads.html) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Auflisten
- ** ListObjectVersions **
- **SDK-Client:** s3
- **IAM-Aktion:** [s3:ListBucketVersions](#list_s3-action-ListBucketVersions)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Auflisten
- ** ListObjects **
- **SDK-Client:** s3
- **IAM-Aktion:** [s3:GetObjectAcl](#list_s3-action-GetObjectAcl) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Lesen
- **IAM-Aktion:** [s3:ListBucket](#list_s3-action-ListBucket) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Auflisten
- **IAM-Aktion:** [s3-object-lambda:ListBucket](https://docs.aws.amazon.com/AmazonS3/latest/API/API_ListObjectsV2.html) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Auflisten
- ** ListObjectsV2 **
- **SDK-Client:** s3
- **IAM-Aktion:** [s3:GetObjectAcl](#list_s3-action-GetObjectAcl) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Lesen
- **IAM-Aktion:** [s3:ListBucket](#list_s3-action-ListBucket) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Auflisten
- **IAM-Aktion:** [s3-object-lambda:ListBucket](https://docs.aws.amazon.com/AmazonS3/latest/API/API_ListObjectsV2.html) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Auflisten
- ** ListParts **
- **SDK-Client:** s3
- **IAM-Aktion:** [s3:ListMultipartUploadParts](#list_s3-action-ListMultipartUploadParts) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Auflisten
- **IAM-Aktion:** [s3-object-lambda:ListMultipartUploadParts](https://docs.aws.amazon.com/AmazonS3/latest/API/API_ListParts.html) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Auflisten
- ** PutBucketAccelerateConfiguration **
- **SDK-Client:** s3
- **IAM-Aktion:** [s3:PutAccelerateConfiguration](#list_s3-action-PutAccelerateConfiguration)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Schreiben
- ** PutBucketAcl **
- **SDK-Client:** s3
- **IAM-Aktion:** [s3:PutBucketAcl](#list_s3-action-PutBucketAcl)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Verwaltung von Berechtigungen, Schreiben
- ** PutBucketAnalyticsConfiguration **
- **SDK-Client:** s3
- **IAM-Aktion:** [s3:PutAnalyticsConfiguration](#list_s3-action-PutAnalyticsConfiguration)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Schreiben
- ** PutBucketCors **
- **SDK-Client:** s3
- **IAM-Aktion:** [s3:PutBucketCORS](#list_s3-action-PutBucketCORS)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Schreiben
- ** PutBucketEncryption **
- **SDK-Client:** s3
- **IAM-Aktion:** [s3:PutEncryptionConfiguration](#list_s3-action-PutEncryptionConfiguration)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Schreiben
- ** PutBucketIntelligentTieringConfiguration **
- **SDK-Client:** s3
- **IAM-Aktion:** [s3:PutIntelligentTieringConfiguration](#list_s3-action-PutIntelligentTieringConfiguration)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Schreiben
- ** PutBucketInventoryConfiguration **
- **SDK-Client:** s3
- **IAM-Aktion:** [s3:PutInventoryConfiguration](#list_s3-action-PutInventoryConfiguration)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Schreiben
- ** PutBucketLifecycle **
- **SDK-Client:** s3
- **IAM-Aktion:** [s3:PutLifecycleConfiguration](#list_s3-action-PutLifecycleConfiguration)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Schreiben
- ** PutBucketLifecycleConfiguration **
- **SDK-Client:** s3
- **IAM-Aktion:** [s3:PutLifecycleConfiguration](#list_s3-action-PutLifecycleConfiguration) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Schreiben
- **IAM-Aktion:** [s3express:PutLifecycleConfiguration](https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutBucketLifecycleConfiguration.html) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Schreiben
- ** PutBucketLogging **
- **SDK-Client:** s3
- **IAM-Aktion:** [s3:PutBucketLogging](#list_s3-action-PutBucketLogging)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Schreiben
- ** PutBucketMetricsConfiguration **
- **SDK-Client:** s3
- **IAM-Aktion:** [s3:PutMetricsConfiguration](#list_s3-action-PutMetricsConfiguration)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Schreiben
- ** PutBucketNotificationConfiguration **
- **SDK-Client:** s3
- **IAM-Aktion:** [s3:PutBucketNotification](#list_s3-action-PutBucketNotification)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Schreiben
- ** PutBucketOwnershipControls **
- **SDK-Client:** s3
- **IAM-Aktion:** [s3:PutBucketOwnershipControls](#list_s3-action-PutBucketOwnershipControls)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Verwaltung von Berechtigungen, Schreiben
- ** PutBucketPolicy **
- **SDK-Client:** s3
- **IAM-Aktion:** [s3:PutBucketPolicy](#list_s3-action-PutBucketPolicy)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Verwaltung von Berechtigungen, Schreiben
- ** PutBucketReplication **
- **SDK-Client:** s3
- **IAM-Aktion:** [s3:PutReplicationConfiguration](#list_s3-action-PutReplicationConfiguration) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Schreiben
- **IAM-Aktion:** [iam:PassRole](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_use_passrole.html) / **Bedingungsschlüssel:** iam:PassedToService / **Mögliche (n) Wert (e):** s3.amazonaws.com / **Zugriffsebene:** Schreiben
- ** PutBucketRequestPayment **
- **SDK-Client:** s3
- **IAM-Aktion:** [s3:PutBucketRequestPayment](#list_s3-action-PutBucketRequestPayment)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Schreiben
- ** PutBucketTagging **
- **SDK-Client:** s3
- **IAM-Aktion:** [s3:PutBucketTagging](#list_s3-action-PutBucketTagging)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Taggen, Schreiben
- ** PutBucketVersioning **
- **SDK-Client:** s3
- **IAM-Aktion:** [s3:PutBucketVersioning](#list_s3-action-PutBucketVersioning)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Schreiben
- ** PutBucketWebsite **
- **SDK-Client:** s3
- **IAM-Aktion:** [s3:PutBucketWebsite](#list_s3-action-PutBucketWebsite)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Schreiben
- ** PutObject **
- **SDK-Client:** s3
- **IAM-Aktion:** [s3:PutObject](#list_s3-action-PutObject) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Schreiben
- **IAM-Aktion:** [s3:PutObjectAcl](#list_s3-action-PutObjectAcl) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Verwaltung von Berechtigungen, Schreiben
- **IAM-Aktion:** [s3:PutObjectLegalHold](#list_s3-action-PutObjectLegalHold) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Schreiben
- **IAM-Aktion:** [s3:PutObjectRetention](#list_s3-action-PutObjectRetention) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Schreiben
- **IAM-Aktion:** [s3:PutObjectTagging](#list_s3-action-PutObjectTagging) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Taggen, Schreiben
- **IAM-Aktion:** [s3-object-lambda:PutObject](https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutObject.html) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Schreiben
- ** PutObjectAcl **
- **SDK-Client:** s3
- **IAM-Aktion:** [s3:PutObjectAcl](#list_s3-action-PutObjectAcl) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Verwaltung von Berechtigungen, Schreiben
- **IAM-Aktion:** [s3:PutObjectVersionAcl](#list_s3-action-PutObjectVersionAcl) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Verwaltung von Berechtigungen, Schreiben
- **IAM-Aktion:** [s3-object-lambda:PutObjectAcl](https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutObjectAcl.html) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Verwaltung von Berechtigungen, Schreiben
- ** PutObjectLegalHold **
- **SDK-Client:** s3
- **IAM-Aktion:** [s3:PutObjectLegalHold](#list_s3-action-PutObjectLegalHold) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Schreiben
- **IAM-Aktion:** [s3-object-lambda:PutObjectLegalHold](https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutObjectLegalHold.html) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Schreiben
- ** PutObjectLockConfiguration **
- **SDK-Client:** s3
- **IAM-Aktion:** [s3:PutBucketObjectLockConfiguration](#list_s3-action-PutBucketObjectLockConfiguration)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Schreiben
- ** PutObjectRetention **
- **SDK-Client:** s3
- **IAM-Aktion:** [s3:BypassGovernanceRetention](#list_s3-action-BypassGovernanceRetention) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Verwaltung von Berechtigungen, Schreiben
- **IAM-Aktion:** [s3:PutObjectRetention](#list_s3-action-PutObjectRetention) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Schreiben
- **IAM-Aktion:** [s3-object-lambda:PutObjectRetention](https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutObjectRetention.html) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Schreiben
- ** PutObjectTagging **
- **SDK-Client:** s3
- **IAM-Aktion:** [s3:PutObjectTagging](#list_s3-action-PutObjectTagging) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Taggen, Schreiben
- **IAM-Aktion:** [s3:PutObjectVersionTagging](#list_s3-action-PutObjectVersionTagging) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Taggen, Schreiben
- **IAM-Aktion:** [s3-object-lambda:PutObjectTagging](https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutObjectTagging.html) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Taggen, Schreiben
- ** PutPublicAccessBlock **
- **SDK-Client:** s3
- **IAM-Aktion:** [s3:PutBucketPublicAccessBlock](#list_s3-action-PutBucketPublicAccessBlock)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Verwaltung von Berechtigungen, Schreiben
- ** RestoreObject **
- **SDK-Client:** s3
- **IAM-Aktion:** [s3:RestoreObject](#list_s3-action-RestoreObject) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Schreiben
- **IAM-Aktion:** [s3-object-lambda:RestoreObject](https://docs.aws.amazon.com/AmazonS3/latest/API/API_RestoreObject.html) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Schreiben
- ** SelectObjectContent **
- **SDK-Client:** s3
- **IAM-Aktion:** [s3:GetObject](#list_s3-action-GetObject)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Lesen
- ** UpdateBucketMetadataInventoryTableConfiguration **
- **SDK-Client:** s3
- **IAM-Aktion:** [s3:UpdateBucketMetadataInventoryTableConfiguration](#list_s3-action-UpdateBucketMetadataInventoryTableConfiguration) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Write (Schreiben)
- **IAM-Aktion:** [s3tables:CreateNamespace](https://docs.aws.amazon.com/AmazonS3/latest/API/API_s3Buckets_CreateNamespace.html) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Schreiben
- **IAM-Aktion:** [s3tables:CreateTable](https://docs.aws.amazon.com/AmazonS3/latest/API/API_s3Buckets_CreateTable.html) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Schreiben
- **IAM-Aktion:** [s3tables:CreateTableBucket](https://docs.aws.amazon.com/AmazonS3/latest/API/API_s3Buckets_CreateTableBucket.html) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Schreiben
- **IAM-Aktion:** [s3tables:GetTable](https://docs.aws.amazon.com/AmazonS3/latest/API/API_s3Buckets_GetTable.html) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Lesen
- **IAM-Aktion:** [s3tables:PutTableEncryption](https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-tables-setting-up.html#s3-tables-actions) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Write (Schreiben)
- **IAM-Aktion:** [s3tables:PutTablePolicy](https://docs.aws.amazon.com/AmazonS3/latest/API/API_s3Buckets_PutTablePolicy.html) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Verwaltung von Berechtigungen, Schreiben
- ** UpdateBucketMetadataJournalTableConfiguration **
- **SDK-Client:** s3
- **IAM-Aktion:** [s3:UpdateBucketMetadataJournalTableConfiguration](#list_s3-action-UpdateBucketMetadataJournalTableConfiguration)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Schreiben
- ** UploadPart **
- **SDK-Client:** s3
- **IAM-Aktion:** [s3:PutObject](#list_s3-action-PutObject) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Schreiben
- **IAM-Aktion:** [s3-object-lambda:PutObject](https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutObject.html) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Schreiben
- ** UploadPartCopy **
- **SDK-Client:** s3
- **IAM-Aktion:** [s3:GetObject](#list_s3-action-GetObject) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Lesen
- **IAM-Aktion:** [s3:GetObjectVersion](#list_s3-action-GetObjectVersion) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Lesen
- **IAM-Aktion:** [s3:PutObject](#list_s3-action-PutObject) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Write (Schreiben)
- ** AssociateAccessGrantsIdentityCenter **
- **SDK-Client:** s3control
- **IAM-Aktion:** [s3:AssociateAccessGrantsIdentityCenter](#list_s3-action-AssociateAccessGrantsIdentityCenter) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Verwaltung von Berechtigungen, Schreiben
- **IAM-Aktion:** [sso:CreateApplication](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_CreateApplication.html) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Schreiben
- **IAM-Aktion:** [sso:PutApplicationAuthenticationMethod](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_PutApplicationAuthenticationMethod.html) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Schreiben
- **IAM-Aktion:** [sso:PutApplicationGrant](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_PutApplicationGrant.html) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Schreiben
- ** CreateAccessGrant **
- **SDK-Client:** s3control
- **IAM-Aktion:** [s3:CreateAccessGrant](#list_s3-action-CreateAccessGrant) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Verwaltung von Berechtigungen, Schreiben
- **IAM-Aktion:** [identitystore:DescribeUser](https://docs.aws.amazon.com/singlesignon/latest/IdentityStoreAPIReference/API_DescribeUser.html) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Lesen
- **IAM-Aktion:** [sso:DescribeApplication](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_DescribeApplication.html) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Lesen
- **IAM-Aktion:** [sso:DescribeInstance](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_DescribeInstance.html) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Lesen
- ** CreateAccessGrantsInstance **
- **SDK-Client:** s3control
- **IAM-Aktion:** [s3:CreateAccessGrantsInstance](#list_s3-action-CreateAccessGrantsInstance) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Verwaltung von Berechtigungen, Schreiben
- **IAM-Aktion:** [sso:CreateApplication](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_CreateApplication.html) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Schreiben
- **IAM-Aktion:** [sso:DescribeInstance](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_DescribeInstance.html) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Lesen
- **IAM-Aktion:** [sso:PutApplicationAuthenticationMethod](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_PutApplicationAuthenticationMethod.html) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Write (Schreiben)
- **IAM-Aktion:** [sso:PutApplicationGrant](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_PutApplicationGrant.html) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Schreiben
- ** CreateAccessGrantsLocation **
- **SDK-Client:** s3control
- **IAM-Aktion:** [s3:CreateAccessGrantsLocation](#list_s3-action-CreateAccessGrantsLocation) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Verwaltung von Berechtigungen, Schreiben
- **IAM-Aktion:** [iam:PassRole](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_use_passrole.html) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Schreiben
- ** CreateAccessPoint **
- **SDK-Client:** s3control
- **IAM-Aktion:** [s3:CreateAccessPoint](#list_s3-action-CreateAccessPoint)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Schreiben
- ** CreateAccessPointForObjectLambda **
- **SDK-Client:** s3control
- **IAM-Aktion:** [s3:CreateAccessPointForObjectLambda](#list_s3-action-CreateAccessPointForObjectLambda)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Schreiben
- ** CreateBucket **
- **SDK-Client:** s3control
- **IAM-Aktion:** [s3:CreateBucket](#list_s3-action-CreateBucket) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Schreiben
- **IAM-Aktion:** [s3:PutBucketAcl](#list_s3-action-PutBucketAcl) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Verwaltung von Berechtigungen, Schreiben
- **IAM-Aktion:** [s3:PutBucketObjectLockConfiguration](#list_s3-action-PutBucketObjectLockConfiguration) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Schreiben
- **IAM-Aktion:** [s3:PutBucketOwnershipControls](#list_s3-action-PutBucketOwnershipControls) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Verwaltung von Berechtigungen, Schreiben
- **IAM-Aktion:** [s3:PutBucketVersioning](#list_s3-action-PutBucketVersioning) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Schreiben
- ** CreateJob **
- **SDK-Client:** s3control
- **IAM-Aktion:** [s3:CreateJob](#list_s3-action-CreateJob)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Schreiben
- ** CreateMultiRegionAccessPoint **
- **SDK-Client:** s3control
- **IAM-Aktion:** [s3:CreateMultiRegionAccessPoint](#list_s3-action-CreateMultiRegionAccessPoint)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Schreiben
- ** CreateStorageLensGroup **
- **SDK-Client:** s3control
- **IAM-Aktion:** [s3:CreateStorageLensGroup](#list_s3-action-CreateStorageLensGroup) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Schreiben
- **IAM-Aktion:** [s3:TagResource](#list_s3-action-TagResource) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Taggen, Schreiben
- ** DeleteAccessGrant **
- **SDK-Client:** s3control
- **IAM-Aktion:** [s3:DeleteAccessGrant](#list_s3-action-DeleteAccessGrant)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Verwaltung von Berechtigungen, Schreiben
- ** DeleteAccessGrantsInstance **
- **SDK-Client:** s3control
- **IAM-Aktion:** [s3:DeleteAccessGrantsInstance](#list_s3-action-DeleteAccessGrantsInstance)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Verwaltung von Berechtigungen, Schreiben
- ** DeleteAccessGrantsInstanceResourcePolicy **
- **SDK-Client:** s3control
- **IAM-Aktion:** [s3:DeleteAccessGrantsInstanceResourcePolicy](#list_s3-action-DeleteAccessGrantsInstanceResourcePolicy)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Verwaltung von Berechtigungen, Schreiben
- ** DeleteAccessGrantsLocation **
- **SDK-Client:** s3control
- **IAM-Aktion:** [s3:DeleteAccessGrantsLocation](#list_s3-action-DeleteAccessGrantsLocation)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Verwaltung von Berechtigungen, Schreiben
- ** DeleteAccessPoint **
- **SDK-Client:** s3control
- **IAM-Aktion:** [s3:DeleteAccessPoint](#list_s3-action-DeleteAccessPoint)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Schreiben
- ** DeleteAccessPointForObjectLambda **
- **SDK-Client:** s3control
- **IAM-Aktion:** [s3:DeleteAccessPointForObjectLambda](#list_s3-action-DeleteAccessPointForObjectLambda)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Schreiben
- ** DeleteAccessPointPolicy **
- **SDK-Client:** s3control
- **IAM-Aktion:** [s3:DeleteAccessPointPolicy](#list_s3-action-DeleteAccessPointPolicy)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Verwaltung von Berechtigungen, Schreiben
- ** DeleteAccessPointPolicyForObjectLambda **
- **SDK-Client:** s3control
- **IAM-Aktion:** [s3:DeleteAccessPointPolicyForObjectLambda](#list_s3-action-DeleteAccessPointPolicyForObjectLambda)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Verwaltung von Berechtigungen, Schreiben
- ** DeleteBucket **
- **SDK-Client:** s3control
- **IAM-Aktion:** [s3:DeleteBucket](#list_s3-action-DeleteBucket)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Schreiben
- ** DeleteBucketPolicy **
- **SDK-Client:** s3control
- **IAM-Aktion:** [s3:DeleteBucketPolicy](#list_s3-action-DeleteBucketPolicy)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Verwaltung von Berechtigungen, Schreiben
- ** DeleteBucketReplication **
- **SDK-Client:** s3control
- **IAM-Aktion:** [s3:PutReplicationConfiguration](#list_s3-action-PutReplicationConfiguration)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Schreiben
- ** DeleteBucketTagging **
- **SDK-Client:** s3control
- **IAM-Aktion:** [s3:PutBucketTagging](#list_s3-action-PutBucketTagging)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Taggen, Schreiben
- ** DeleteJobTagging **
- **SDK-Client:** s3control
- **IAM-Aktion:** [s3:DeleteJobTagging](#list_s3-action-DeleteJobTagging)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Taggen, Schreiben
- ** DeleteMultiRegionAccessPoint **
- **SDK-Client:** s3control
- **IAM-Aktion:** [s3:DeleteMultiRegionAccessPoint](#list_s3-action-DeleteMultiRegionAccessPoint)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Schreiben
- ** DeletePublicAccessBlock **
- **SDK-Client:** s3control
- **IAM-Aktion:** [s3:PutBucketPublicAccessBlock](#list_s3-action-PutBucketPublicAccessBlock)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Verwaltung von Berechtigungen, Schreiben
- ** DeleteStorageLensConfiguration **
- **SDK-Client:** s3control
- **IAM-Aktion:** [s3:DeleteStorageLensConfiguration](#list_s3-action-DeleteStorageLensConfiguration)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Schreiben
- ** DeleteStorageLensConfigurationTagging **
- **SDK-Client:** s3control
- **IAM-Aktion:** [s3:DeleteStorageLensConfigurationTagging](#list_s3-action-DeleteStorageLensConfigurationTagging)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Taggen, Schreiben
- ** DeleteStorageLensGroup **
- **SDK-Client:** s3control
- **IAM-Aktion:** [s3:DeleteStorageLensGroup](#list_s3-action-DeleteStorageLensGroup)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Schreiben
- ** DescribeJob **
- **SDK-Client:** s3control
- **IAM-Aktion:** [s3:DescribeJob](#list_s3-action-DescribeJob)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Lesen
- ** DescribeMultiRegionAccessPointOperation **
- **SDK-Client:** s3control
- **IAM-Aktion:** [s3:DescribeMultiRegionAccessPointOperation](#list_s3-action-DescribeMultiRegionAccessPointOperation)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Lesen
- ** DissociateAccessGrantsIdentityCenter **
- **SDK-Client:** s3control
- **IAM-Aktion:** [s3:DissociateAccessGrantsIdentityCenter](#list_s3-action-DissociateAccessGrantsIdentityCenter) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Verwaltung von Berechtigungen, Schreiben
- **IAM-Aktion:** [sso:DeleteApplication](https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_DeleteApplication.html) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Schreiben
- ** GetAccessGrant **
- **SDK-Client:** s3control
- **IAM-Aktion:** [s3:GetAccessGrant](#list_s3-action-GetAccessGrant)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Lesen
- ** GetAccessGrantsInstance **
- **SDK-Client:** s3control
- **IAM-Aktion:** [s3:GetAccessGrantsInstance](#list_s3-action-GetAccessGrantsInstance)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Lesen
- ** GetAccessGrantsInstanceForPrefix **
- **SDK-Client:** s3control
- **IAM-Aktion:** [s3:GetAccessGrantsInstanceForPrefix](#list_s3-action-GetAccessGrantsInstanceForPrefix)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Lesen
- ** GetAccessGrantsInstanceResourcePolicy **
- **SDK-Client:** s3control
- **IAM-Aktion:** [s3:GetAccessGrantsInstanceResourcePolicy](#list_s3-action-GetAccessGrantsInstanceResourcePolicy)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Lesen
- ** GetAccessGrantsLocation **
- **SDK-Client:** s3control
- **IAM-Aktion:** [s3:GetAccessGrantsLocation](#list_s3-action-GetAccessGrantsLocation)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Lesen
- ** GetAccessPoint **
- **SDK-Client:** s3control
- **IAM-Aktion:** [s3:GetAccessPoint](#list_s3-action-GetAccessPoint)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Lesen
- ** GetAccessPointConfigurationForObjectLambda **
- **SDK-Client:** s3control
- **IAM-Aktion:** [s3:GetAccessPointConfigurationForObjectLambda](#list_s3-action-GetAccessPointConfigurationForObjectLambda)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Lesen
- ** GetAccessPointForObjectLambda **
- **SDK-Client:** s3control
- **IAM-Aktion:** [s3:GetAccessPointForObjectLambda](#list_s3-action-GetAccessPointForObjectLambda)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Lesen
- ** GetAccessPointPolicy **
- **SDK-Client:** s3control
- **IAM-Aktion:** [s3:GetAccessPointPolicy](#list_s3-action-GetAccessPointPolicy)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Lesen
- ** GetAccessPointPolicyForObjectLambda **
- **SDK-Client:** s3control
- **IAM-Aktion:** [s3:GetAccessPointPolicyForObjectLambda](#list_s3-action-GetAccessPointPolicyForObjectLambda)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Lesen
- ** GetAccessPointPolicyStatus **
- **SDK-Client:** s3control
- **IAM-Aktion:** [s3:GetAccessPointPolicyStatus](#list_s3-action-GetAccessPointPolicyStatus)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Lesen
- ** GetAccessPointPolicyStatusForObjectLambda **
- **SDK-Client:** s3control
- **IAM-Aktion:** [s3:GetAccessPointPolicyStatusForObjectLambda](#list_s3-action-GetAccessPointPolicyStatusForObjectLambda)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Lesen
- ** GetBucketLifecycleConfiguration **
- **SDK-Client:** s3control
- **IAM-Aktion:** [s3:GetLifecycleConfiguration](#list_s3-action-GetLifecycleConfiguration) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Lesen
- **IAM-Aktion:** [s3express:GetLifecycleConfiguration](https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketLifecycleConfiguration.html) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Lesen
- ** GetBucketPolicy **
- **SDK-Client:** s3control
- **IAM-Aktion:** [s3:GetBucketPolicy](#list_s3-action-GetBucketPolicy)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Lesen
- ** GetBucketReplication **
- **SDK-Client:** s3control
- **IAM-Aktion:** [s3:GetReplicationConfiguration](#list_s3-action-GetReplicationConfiguration)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Lesen
- ** GetBucketTagging **
- **SDK-Client:** s3control
- **IAM-Aktion:** [s3:GetBucketTagging](#list_s3-action-GetBucketTagging)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Lesen
- ** GetBucketVersioning **
- **SDK-Client:** s3control
- **IAM-Aktion:** [s3:GetBucketVersioning](#list_s3-action-GetBucketVersioning)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Lesen
- ** GetDataAccess **
- **SDK-Client:** s3control
- **IAM-Aktion:** [s3:GetDataAccess](#list_s3-action-GetDataAccess)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Lesen
- ** GetJobTagging **
- **SDK-Client:** s3control
- **IAM-Aktion:** [s3:GetJobTagging](#list_s3-action-GetJobTagging)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Lesen
- ** GetMultiRegionAccessPoint **
- **SDK-Client:** s3control
- **IAM-Aktion:** [s3:GetMultiRegionAccessPoint](#list_s3-action-GetMultiRegionAccessPoint)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Lesen
- ** GetMultiRegionAccessPointPolicy **
- **SDK-Client:** s3control
- **IAM-Aktion:** [s3:GetMultiRegionAccessPointPolicy](#list_s3-action-GetMultiRegionAccessPointPolicy)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Lesen
- ** GetMultiRegionAccessPointPolicyStatus **
- **SDK-Client:** s3control
- **IAM-Aktion:** [s3:GetMultiRegionAccessPointPolicyStatus](#list_s3-action-GetMultiRegionAccessPointPolicyStatus)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Lesen
- ** GetMultiRegionAccessPointRoutes **
- **SDK-Client:** s3control
- **IAM-Aktion:** [s3:GetMultiRegionAccessPointRoutes](#list_s3-action-GetMultiRegionAccessPointRoutes)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Lesen
- ** GetPublicAccessBlock **
- **SDK-Client:** s3control
- **IAM-Aktion:** [s3:GetBucketPublicAccessBlock](#list_s3-action-GetBucketPublicAccessBlock)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Lesen
- ** GetStorageLensConfiguration **
- **SDK-Client:** s3control
- **IAM-Aktion:** [s3:GetStorageLensConfiguration](#list_s3-action-GetStorageLensConfiguration)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Lesen
- ** GetStorageLensConfigurationTagging **
- **SDK-Client:** s3control
- **IAM-Aktion:** [s3:GetStorageLensConfigurationTagging](#list_s3-action-GetStorageLensConfigurationTagging)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Lesen
- ** GetStorageLensGroup **
- **SDK-Client:** s3control
- **IAM-Aktion:** [s3:GetStorageLensGroup](#list_s3-action-GetStorageLensGroup)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Lesen
- ** ListAccessGrants **
- **SDK-Client:** s3control
- **IAM-Aktion:** [s3:ListAccessGrants](#list_s3-action-ListAccessGrants)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Auflisten
- ** ListAccessGrantsInstances **
- **SDK-Client:** s3control
- **IAM-Aktion:** [s3:ListAccessGrantsInstances](#list_s3-action-ListAccessGrantsInstances)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Auflisten
- ** ListAccessGrantsLocations **
- **SDK-Client:** s3control
- **IAM-Aktion:** [s3:ListAccessGrantsLocations](#list_s3-action-ListAccessGrantsLocations)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Auflisten
- ** ListAccessPoints **
- **SDK-Client:** s3control
- **IAM-Aktion:** [s3:ListAccessPoints](#list_s3-action-ListAccessPoints)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Auflisten
- ** ListAccessPointsForObjectLambda **
- **SDK-Client:** s3control
- **IAM-Aktion:** [s3:ListAccessPointsForObjectLambda](#list_s3-action-ListAccessPointsForObjectLambda)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Auflisten
- ** ListCallerAccessGrants **
- **SDK-Client:** s3control
- **IAM-Aktion:** [s3:ListCallerAccessGrants](#list_s3-action-ListCallerAccessGrants)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Auflisten
- ** ListJobs **
- **SDK-Client:** s3control
- **IAM-Aktion:** [s3:ListJobs](#list_s3-action-ListJobs)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Auflisten
- ** ListMultiRegionAccessPoints **
- **SDK-Client:** s3control
- **IAM-Aktion:** [s3:ListMultiRegionAccessPoints](#list_s3-action-ListMultiRegionAccessPoints)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Auflisten
- ** ListStorageLensConfigurations **
- **SDK-Client:** s3control
- **IAM-Aktion:** [s3:ListStorageLensConfigurations](#list_s3-action-ListStorageLensConfigurations)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Auflisten
- ** ListStorageLensGroups **
- **SDK-Client:** s3control
- **IAM-Aktion:** [s3:ListStorageLensGroups](#list_s3-action-ListStorageLensGroups)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Auflisten
- ** ListTagsForResource **
- **SDK-Client:** s3control
- **IAM-Aktion:** [s3:ListTagsForResource](#list_s3-action-ListTagsForResource)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Auflisten
- ** PutAccessGrantsInstanceResourcePolicy **
- **SDK-Client:** s3control
- **IAM-Aktion:** [s3:PutAccessGrantsInstanceResourcePolicy](#list_s3-action-PutAccessGrantsInstanceResourcePolicy)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Verwaltung von Berechtigungen, Schreiben
- ** PutAccessPointConfigurationForObjectLambda **
- **SDK-Client:** s3control
- **IAM-Aktion:** [s3:PutAccessPointConfigurationForObjectLambda](#list_s3-action-PutAccessPointConfigurationForObjectLambda)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Schreiben
- ** PutAccessPointPolicy **
- **SDK-Client:** s3control
- **IAM-Aktion:** [s3:PutAccessPointPolicy](#list_s3-action-PutAccessPointPolicy)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Verwaltung von Berechtigungen, Schreiben
- ** PutAccessPointPolicyForObjectLambda **
- **SDK-Client:** s3control
- **IAM-Aktion:** [s3:PutAccessPointPolicyForObjectLambda](#list_s3-action-PutAccessPointPolicyForObjectLambda)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Verwaltung von Berechtigungen, Schreiben
- ** PutBucketLifecycleConfiguration **
- **SDK-Client:** s3control
- **IAM-Aktion:** [s3:PutLifecycleConfiguration](#list_s3-action-PutLifecycleConfiguration) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Schreiben
- **IAM-Aktion:** [s3express:PutLifecycleConfiguration](https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutBucketLifecycleConfiguration.html) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Schreiben
- ** PutBucketPolicy **
- **SDK-Client:** s3control
- **IAM-Aktion:** [s3:PutBucketPolicy](#list_s3-action-PutBucketPolicy)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Verwaltung von Berechtigungen, Schreiben
- ** PutBucketReplication **
- **SDK-Client:** s3control
- **IAM-Aktion:** [s3:PutReplicationConfiguration](#list_s3-action-PutReplicationConfiguration) / **Bedingungsschlüssel:** / **Mögliche (n) Wert (e):** / **Zugriffsebene:** Schreiben
- **IAM-Aktion:** [iam:PassRole](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_use_passrole.html) / **Bedingungsschlüssel:** iam:PassedToService / **Mögliche (n) Wert (e):** s3.amazonaws.com / **Zugriffsebene:** Schreiben
- ** PutBucketTagging **
- **SDK-Client:** s3control
- **IAM-Aktion:** [s3:PutBucketTagging](#list_s3-action-PutBucketTagging)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Taggen, Schreiben
- ** PutBucketVersioning **
- **SDK-Client:** s3control
- **IAM-Aktion:** [s3:PutBucketVersioning](#list_s3-action-PutBucketVersioning)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Schreiben
- ** PutJobTagging **
- **SDK-Client:** s3control
- **IAM-Aktion:** [s3:PutJobTagging](#list_s3-action-PutJobTagging)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Taggen, Schreiben
- ** PutMultiRegionAccessPointPolicy **
- **SDK-Client:** s3control
- **IAM-Aktion:** [s3:PutMultiRegionAccessPointPolicy](#list_s3-action-PutMultiRegionAccessPointPolicy)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Verwaltung von Berechtigungen, Schreiben
- ** PutPublicAccessBlock **
- **SDK-Client:** s3control
- **IAM-Aktion:** [s3:PutBucketPublicAccessBlock](#list_s3-action-PutBucketPublicAccessBlock)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Verwaltung von Berechtigungen, Schreiben
- ** PutStorageLensConfiguration **
- **SDK-Client:** s3control
- **IAM-Aktion:** [s3:PutStorageLensConfiguration](#list_s3-action-PutStorageLensConfiguration)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Schreiben
- ** PutStorageLensConfigurationTagging **
- **SDK-Client:** s3control
- **IAM-Aktion:** [s3:PutStorageLensConfigurationTagging](#list_s3-action-PutStorageLensConfigurationTagging)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Taggen, Schreiben
- ** SubmitMultiRegionAccessPointRoutes **
- **SDK-Client:** s3control
- **IAM-Aktion:** [s3:SubmitMultiRegionAccessPointRoutes](#list_s3-action-SubmitMultiRegionAccessPointRoutes)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Schreiben
- ** TagResource **
- **SDK-Client:** s3control
- **IAM-Aktion:** [s3:TagResource](#list_s3-action-TagResource)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Taggen, Schreiben
- ** UntagResource **
- **SDK-Client:** s3control
- **IAM-Aktion:** [s3:UntagResource](#list_s3-action-UntagResource)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Taggen, Schreiben
- ** UpdateAccessGrantsLocation **
- **SDK-Client:** s3control
- **IAM-Aktion:** [s3:UpdateAccessGrantsLocation](#list_s3-action-UpdateAccessGrantsLocation)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Verwaltung von Berechtigungen, Schreiben
- ** UpdateJobPriority **
- **SDK-Client:** s3control
- **IAM-Aktion:** [s3:UpdateJobPriority](#list_s3-action-UpdateJobPriority)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Schreiben
- ** UpdateJobStatus **
- **SDK-Client:** s3control
- **IAM-Aktion:** [s3:UpdateJobStatus](#list_s3-action-UpdateJobStatus)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Schreiben
- ** UpdateStorageLensGroup **
- **SDK-Client:** s3control
- **IAM-Aktion:** [s3:UpdateStorageLensGroup](#list_s3-action-UpdateStorageLensGroup)
- **Bedingungsschlüssel:**
- **Mögliche (n) Wert (e):**
- **Zugriffsebene:** Schreiben
## Von Amazon S3 definierte Aktionen
Sie können die folgenden Aktionen im Element `Action` einer IAM-Richtlinienanweisung angeben. Für jede Aktion sind in der Tabelle die Ressourcentypen und Bedingungsschlüssel aufgeführt, die von dieser Aktion unterstützt werden. Verwenden Sie Richtlinien, um Berechtigungen zum Ausführen einer Operation in AWS zu erteilen. Wenn Sie eine Aktion in einer Richtlinie verwenden, erlauben oder verweigern Sie in der Regel den Zugriff auf die API-Operation oder den CLI-Befehl mit demselben Namen. Dabei kann es mitunter vorkommen, dass eine einzige Aktion den Zugriff auf mehr als eine Operation steuert. Alternativ erfordern einige Vorgänge mehrere verschiedene Aktionen.
- ** [AbortMultipartUpload](https://docs.aws.amazon.com/AmazonS3/latest/API/API_AbortMultipartUpload.html) **
- **Description:** Gewährt die Berechtigung zum Abbrechen eines mehrteiligen Uploads
- **Ressourcentypen (\*erforderlich):** [accesspointobject](#list_s3-resource-accesspointobject) / **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:AccessGrantsInstanceArn](#list_s3-s3_AccessGrantsInstanceArn)
[s3:AccessPointNetworkOrigin](#list_s3-s3_AccessPointNetworkOrigin)
[s3:AccessPointTag/${TagKey}](#list_s3-s3_AccessPointTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:DataAccessPointAccount](#list_s3-s3_DataAccessPointAccount)
[s3:DataAccessPointArn](#list_s3-s3_DataAccessPointArn)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Ressourcentypen (\*erforderlich):** [object](#list_s3-resource-object) / **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:AccessGrantsInstanceArn](#list_s3-s3_AccessGrantsInstanceArn)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Write
- ** [AllowVendedLogDeliveryForResource](https://docs.aws.amazon.com/AmazonS3/latest/userguide/ServerLogs.html) **
- **Description:** Erteilt die Berechtigung zur Konfiguration der Übermittlung von Serverzugriffsprotokollen an CloudWatch
- **Ressourcentypen (\*erforderlich):** [bucket\*](#list_s3-resource-bucket)
- **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:deliverySourceArn](#list_s3-s3_deliverySourceArn)
[s3:logType](#list_s3-s3_logType)
[s3:resourceArnBeingAuthorized](#list_s3-s3_resourceArnBeingAuthorized)
- **Zugriffsebene:** Lesen
- ** [AssociateAccessGrantsIdentityCenter](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_AssociateAccessGrantsIdentityCenter.html) **
- **Description:** Gewährt die Berechtigung zum Zuordnen von Access Grants Identity Center
- **Ressourcentypen (\*erforderlich):** [accessgrantsinstance\*](#list_s3-resource-accessgrantsinstance)
- **Bedingungsschlüssel:** [aws:RequestTag/${TagKey}](#list_s3-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_s3-aws_TagKeys)
[s3:authType](#list_s3-s3_authType)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Verwaltung von Berechtigungen, Schreiben
- ** [BypassGovernanceRetention](https://docs.aws.amazon.com/AmazonS3/latest/userguide/object-lock-managing.html#object-lock-managing-bypass) **
- **Description:** Gewährt die Berechtigung zum Umgehen von Objektaufbewahrungseinstellungen im Governance-Modus
- **Ressourcentypen (\*erforderlich):** [accesspointobject](#list_s3-resource-accesspointobject) / **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:AccessPointNetworkOrigin](#list_s3-s3_AccessPointNetworkOrigin)
[s3:AccessPointTag/${TagKey}](#list_s3-s3_AccessPointTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:DataAccessPointAccount](#list_s3-s3_DataAccessPointAccount)
[s3:DataAccessPointArn](#list_s3-s3_DataAccessPointArn)
[s3:RequestObjectTag/](#list_s3-s3_RequestObjectTag_key)
[s3:RequestObjectTagKeys](#list_s3-s3_RequestObjectTagKeys)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-acl](#list_s3-s3_x-amz-acl)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
[s3:x-amz-copy-source](#list_s3-s3_x-amz-copy-source)
[s3:x-amz-grant-full-control](#list_s3-s3_x-amz-grant-full-control)
[s3:x-amz-grant-read](#list_s3-s3_x-amz-grant-read)
[s3:x-amz-grant-read-acp](#list_s3-s3_x-amz-grant-read-acp)
[s3:x-amz-grant-write](#list_s3-s3_x-amz-grant-write)
[s3:x-amz-grant-write-acp](#list_s3-s3_x-amz-grant-write-acp)
[s3:x-amz-metadata-directive](#list_s3-s3_x-amz-metadata-directive)
[s3:x-amz-server-side-encryption](#list_s3-s3_x-amz-server-side-encryption)
[s3:x-amz-server-side-encryption-aws-kms-key-id](#list_s3-s3_x-amz-server-side-encryption-aws-kms-key-id)
[s3:x-amz-server-side-encryption-customer-algorithm](#list_s3-s3_x-amz-server-side-encryption-customer-algorithm)
[s3:x-amz-storage-class](#list_s3-s3_x-amz-storage-class)
[s3:x-amz-website-redirect-location](#list_s3-s3_x-amz-website-redirect-location)
- **Ressourcentypen (\*erforderlich):** [object](#list_s3-resource-object) / **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:RequestObjectTag/](#list_s3-s3_RequestObjectTag_key)
[s3:RequestObjectTagKeys](#list_s3-s3_RequestObjectTagKeys)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-acl](#list_s3-s3_x-amz-acl)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
[s3:x-amz-copy-source](#list_s3-s3_x-amz-copy-source)
[s3:x-amz-grant-full-control](#list_s3-s3_x-amz-grant-full-control)
[s3:x-amz-grant-read](#list_s3-s3_x-amz-grant-read)
[s3:x-amz-grant-read-acp](#list_s3-s3_x-amz-grant-read-acp)
[s3:x-amz-grant-write](#list_s3-s3_x-amz-grant-write)
[s3:x-amz-grant-write-acp](#list_s3-s3_x-amz-grant-write-acp)
[s3:x-amz-metadata-directive](#list_s3-s3_x-amz-metadata-directive)
[s3:x-amz-server-side-encryption](#list_s3-s3_x-amz-server-side-encryption)
[s3:x-amz-server-side-encryption-aws-kms-key-id](#list_s3-s3_x-amz-server-side-encryption-aws-kms-key-id)
[s3:x-amz-server-side-encryption-customer-algorithm](#list_s3-s3_x-amz-server-side-encryption-customer-algorithm)
[s3:x-amz-storage-class](#list_s3-s3_x-amz-storage-class)
[s3:x-amz-website-redirect-location](#list_s3-s3_x-amz-website-redirect-location)
- **Zugriffsebene:** Verwaltung von Berechtigungen, Schreiben
- ** [CreateAccessGrant](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_CreateAccessGrant.html) **
- **Description:** Gewährt die Berechtigung zum Erstellen von Access Grant
- **Ressourcentypen (\*erforderlich):** [accessgrant\*](#list_s3-resource-accessgrant)
- **Bedingungsschlüssel:** [aws:RequestTag/${TagKey}](#list_s3-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_s3-aws_TagKeys)
[s3:AccessGrantScope](#list_s3-s3_AccessGrantScope)
[s3:authType](#list_s3-s3_authType)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Verwaltung von Berechtigungen, Schreiben
- ** [CreateAccessGrantsInstance](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_CreateAccessGrantsInstance.html) **
- **Description:** Gewährt die Berechtigung zum Erstellen einer Access Grant-Instance
- **Ressourcentypen (\*erforderlich):** [accessgrantsinstance\*](#list_s3-resource-accessgrantsinstance)
- **Bedingungsschlüssel:** [aws:RequestTag/${TagKey}](#list_s3-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_s3-aws_TagKeys)
[s3:authType](#list_s3-s3_authType)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Verwaltung von Berechtigungen, Schreiben
- ** [CreateAccessGrantsLocation](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_CreateAccessGrantsLocation.html) **
- **Description:** Gewährt die Berechtigung zum Erstellen eines Access Grants-Speicherorts
- **Ressourcentypen (\*erforderlich):** [accessgrantslocation\*](#list_s3-resource-accessgrantslocation)
- **Bedingungsschlüssel:** [aws:RequestTag/${TagKey}](#list_s3-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_s3-aws_TagKeys)
[s3:AccessGrantsLocationScope](#list_s3-s3_AccessGrantsLocationScope)
[s3:authType](#list_s3-s3_authType)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Verwaltung von Berechtigungen, Schreiben
- ** [CreateAccessPoint](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_CreateAccessPoint.html) **
- **Description:** Gewährt die Berechtigung zum Erstellen eines neuen Zugangspunkts
- **Ressourcentypen (\*erforderlich):** [accesspoint\*](#list_s3-resource-accesspoint)
- **Bedingungsschlüssel:** [aws:RequestTag/${TagKey}](#list_s3-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_s3-aws_TagKeys)
[s3:AccessPointNetworkOrigin](#list_s3-s3_AccessPointNetworkOrigin)
[s3:AccessPointTag/${TagKey}](#list_s3-s3_AccessPointTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:DataAccessPointAccount](#list_s3-s3_DataAccessPointAccount)
[s3:DataAccessPointArn](#list_s3-s3_DataAccessPointArn)
[s3:locationconstraint](#list_s3-s3_locationconstraint)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-acl](#list_s3-s3_x-amz-acl)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Write
- ** [CreateAccessPointForObjectLambda](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_CreateAccessPointForObjectLambda.html) **
- **Description:** Gewährt die Berechtigung zum Erstellen eines Objekt-Lambda-fähigen Zugriffspunkts
- **Ressourcentypen (\*erforderlich):** [objectlambdaaccesspoint\*](#list_s3-resource-objectlambdaaccesspoint)
- **Bedingungsschlüssel:** [s3:AccessPointNetworkOrigin](#list_s3-s3_AccessPointNetworkOrigin)
[s3:authType](#list_s3-s3_authType)
[s3:DataAccessPointAccount](#list_s3-s3_DataAccessPointAccount)
[s3:DataAccessPointArn](#list_s3-s3_DataAccessPointArn)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Write
- ** [CreateBucket](https://docs.aws.amazon.com/AmazonS3/latest/API/API_CreateBucket.html) **
- **Description:** Gewährt die Berechtigung zum Erstellen eines neuen Buckets.
- **Ressourcentypen (\*erforderlich):** [bucket\*](#list_s3-resource-bucket)
- **Bedingungsschlüssel:** [aws:RequestTag/${TagKey}](#list_s3-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_s3-aws_TagKeys)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:locationconstraint](#list_s3-s3_locationconstraint)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-acl](#list_s3-s3_x-amz-acl)
[s3:x-amz-bucket-namespace](#list_s3-s3_x-amz-bucket-namespace)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
[s3:x-amz-grant-full-control](#list_s3-s3_x-amz-grant-full-control)
[s3:x-amz-grant-read](#list_s3-s3_x-amz-grant-read)
[s3:x-amz-grant-read-acp](#list_s3-s3_x-amz-grant-read-acp)
[s3:x-amz-grant-write](#list_s3-s3_x-amz-grant-write)
[s3:x-amz-grant-write-acp](#list_s3-s3_x-amz-grant-write-acp)
[s3:x-amz-object-ownership](#list_s3-s3_x-amz-object-ownership)
- **Zugriffsebene:** Schreiben
- ** [CreateBucketMetadataTableConfiguration](https://docs.aws.amazon.com/AmazonS3/latest/API/API_CreateBucketMetadataConfiguration.html) **
- **Description:** Erteilt die Erlaubnis, eine neue S3-Metadatenkonfiguration für einen bestimmten Allzweck-Bucket zu erstellen
- **Ressourcentypen (\*erforderlich):** [bucket\*](#list_s3-resource-bucket)
- **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Schreiben
- ** [CreateJob](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_CreateJob.html) **
- **Description:** Erteilt die Berechtigung zum Erstellen einer neuen Aufgabe in Amazon S3 Batch Operations
- **Ressourcentypen (\*erforderlich):**
- **Bedingungsschlüssel:** [aws:RequestTag/${TagKey}](#list_s3-aws_RequestTag___TagKey_)
[aws:TagKeys](#list_s3-aws_TagKeys)
[s3:authType](#list_s3-s3_authType)
[s3:RequestJobOperation](#list_s3-s3_RequestJobOperation)
[s3:RequestJobPriority](#list_s3-s3_RequestJobPriority)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Schreiben
- ** [CreateMultiRegionAccessPoint](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_CreateMultiRegionAccessPoint.html) **
- **Description:** Erteilt die Erlaubnis, ein neues zu erstellen Multi-Region Zugangspunkt
- **Ressourcentypen (\*erforderlich):** [multiregionaccesspoint\*](#list_s3-resource-multiregionaccesspoint)
- **Bedingungsschlüssel:** [s3:AccessPointNetworkOrigin](#list_s3-s3_AccessPointNetworkOrigin)
[s3:authType](#list_s3-s3_authType)
[s3:DataAccessPointAccount](#list_s3-s3_DataAccessPointAccount)
[s3:DataAccessPointArn](#list_s3-s3_DataAccessPointArn)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
- **Zugriffsebene:** Schreiben
- ** [CreateStorageLensGroup](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_CreateStorageLensGroup.html) **
- **Description:** Gewährt die Berechtigung zum Erstellen einer Amazon-S3-Storage-Lens-Gruppe
- **Ressourcentypen (\*erforderlich):**
- **Bedingungsschlüssel:** [aws:RequestTag/${TagKey}](#list_s3-aws_RequestTag___TagKey_)
[aws:TagKeys](#list_s3-aws_TagKeys)
[s3:authType](#list_s3-s3_authType)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Schreiben
- ** [DeleteAccessGrant](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_DeleteAccessGrant.html) **
- **Description:** Gewährt die Berechtigung zum Löschen eines Access Grants
- **Ressourcentypen (\*erforderlich):** [accessgrant\*](#list_s3-resource-accessgrant)
- **Bedingungsschlüssel:** [aws:RequestTag/${TagKey}](#list_s3-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_s3-aws_TagKeys)
[s3:AccessGrantScope](#list_s3-s3_AccessGrantScope)
[s3:authType](#list_s3-s3_authType)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Verwaltung von Berechtigungen, Schreiben
- ** [DeleteAccessGrantsInstance](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_DeleteAccessGrantsInstance.html) **
- **Description:** Gewährt die Berechtigung zum Löschen einer Access Grant-Instance
- **Ressourcentypen (\*erforderlich):** [accessgrantsinstance\*](#list_s3-resource-accessgrantsinstance)
- **Bedingungsschlüssel:** [aws:RequestTag/${TagKey}](#list_s3-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_s3-aws_TagKeys)
[s3:authType](#list_s3-s3_authType)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Verwaltung von Berechtigungen, Schreiben
- ** [DeleteAccessGrantsInstanceResourcePolicy](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_DeleteAccessGrantsInstanceResourcePolicy.html) **
- **Description:** Gewährt die Berechtigung zum Lesen einer Access Grants Instance-Ressourcenrichtlinie
- **Ressourcentypen (\*erforderlich):** [accessgrantsinstance\*](#list_s3-resource-accessgrantsinstance)
- **Bedingungsschlüssel:** [aws:RequestTag/${TagKey}](#list_s3-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_s3-aws_TagKeys)
[s3:authType](#list_s3-s3_authType)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Verwaltung von Berechtigungen, Schreiben
- ** [DeleteAccessGrantsLocation](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_DeleteAccessGrantsLocation.html) **
- **Description:** Gewährt die Berechtigung zum Löschen eines Access Grant-Speicherorts
- **Ressourcentypen (\*erforderlich):** [accessgrantslocation\*](#list_s3-resource-accessgrantslocation)
- **Bedingungsschlüssel:** [aws:RequestTag/${TagKey}](#list_s3-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_s3-aws_TagKeys)
[s3:AccessGrantsLocationScope](#list_s3-s3_AccessGrantsLocationScope)
[s3:authType](#list_s3-s3_authType)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Verwaltung von Berechtigungen, Schreiben
- ** [DeleteAccessPoint](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_DeleteAccessPoint.html) **
- **Description:** Gewährt die Berechtigung zum Löschen des im URI benannten Zugriffspunkts
- **Ressourcentypen (\*erforderlich):** [accesspoint\*](#list_s3-resource-accesspoint)
- **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:AccessPointNetworkOrigin](#list_s3-s3_AccessPointNetworkOrigin)
[s3:AccessPointTag/${TagKey}](#list_s3-s3_AccessPointTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:DataAccessPointAccount](#list_s3-s3_DataAccessPointAccount)
[s3:DataAccessPointArn](#list_s3-s3_DataAccessPointArn)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Write
- ** [DeleteAccessPointForObjectLambda](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_DeleteAccessPointForObjectLambda.html) **
- **Description:** Gewährt die Berechtigung zum Löschen des im URI benannten Objekt-Lambda-fähigen Zugriffspunkts
- **Ressourcentypen (\*erforderlich):** [objectlambdaaccesspoint\*](#list_s3-resource-objectlambdaaccesspoint)
- **Bedingungsschlüssel:** [s3:AccessPointNetworkOrigin](#list_s3-s3_AccessPointNetworkOrigin)
[s3:authType](#list_s3-s3_authType)
[s3:DataAccessPointAccount](#list_s3-s3_DataAccessPointAccount)
[s3:DataAccessPointArn](#list_s3-s3_DataAccessPointArn)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Write
- ** [DeleteAccessPointPolicy](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_DeleteAccessPointPolicy.html) **
- **Description:** Gewährt die Berechtigung zum Löschen der Richtlinie auf einem angegebenen Zugriffspunkt
- **Ressourcentypen (\*erforderlich):** [accesspoint\*](#list_s3-resource-accesspoint)
- **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:AccessPointNetworkOrigin](#list_s3-s3_AccessPointNetworkOrigin)
[s3:AccessPointTag/${TagKey}](#list_s3-s3_AccessPointTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:DataAccessPointAccount](#list_s3-s3_DataAccessPointAccount)
[s3:DataAccessPointArn](#list_s3-s3_DataAccessPointArn)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Verwaltung von Berechtigungen, Schreiben
- ** [DeleteAccessPointPolicyForObjectLambda](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_DeleteAccessPointPolicyForObjectLambda.html) **
- **Description:** Gewährt die Berechtigung zum Löschen der Richtlinie auf einem angegebenen Objekt-Lambda-fähigen Zugriffspunkt
- **Ressourcentypen (\*erforderlich):** [objectlambdaaccesspoint\*](#list_s3-resource-objectlambdaaccesspoint)
- **Bedingungsschlüssel:** [s3:AccessPointNetworkOrigin](#list_s3-s3_AccessPointNetworkOrigin)
[s3:authType](#list_s3-s3_authType)
[s3:DataAccessPointAccount](#list_s3-s3_DataAccessPointAccount)
[s3:DataAccessPointArn](#list_s3-s3_DataAccessPointArn)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Verwaltung von Berechtigungen, Schreiben
- ** [DeleteBucket](https://docs.aws.amazon.com/AmazonS3/latest/API/API_DeleteBucket.html) **
- **Description:** Gewährt die Berechtigung zum Löschen des im URI benannten Buckets
- **Ressourcentypen (\*erforderlich):** [bucket\*](#list_s3-resource-bucket)
- **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Schreiben
- ** [DeleteBucketMetadataTableConfiguration](https://docs.aws.amazon.com/AmazonS3/latest/API/API_DeleteBucketMetadataConfiguration.html) **
- **Description:** Erteilt die Berechtigung zum Löschen der S3-Metadatenkonfiguration für einen bestimmten Allzweck-Bucket
- **Ressourcentypen (\*erforderlich):** [bucket\*](#list_s3-resource-bucket)
- **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Schreiben
- ** [DeleteBucketPolicy](https://docs.aws.amazon.com/AmazonS3/latest/API/API_DeleteBucketPolicy.html) **
- **Description:** Gewährt die Berechtigung zum Löschen der Richtlinie für einen angegebenen Bucket
- **Ressourcentypen (\*erforderlich):** [bucket\*](#list_s3-resource-bucket)
- **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Verwaltung von Berechtigungen, Schreiben
- ** [DeleteBucketWebsite](https://docs.aws.amazon.com/AmazonS3/latest/API/API_DeleteBucketWebsite.html) **
- **Description:** Gewährt die Berechtigung zum Entfernen der Websitekonfiguration für einen Bucket
- **Ressourcentypen (\*erforderlich):** [bucket\*](#list_s3-resource-bucket)
- **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Write
- ** [DeleteJobTagging](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_DeleteJobTagging.html) **
- **Description:** Erteilt die Berechtigung zum Entfernen von Markierungen aus einer vorhandenen Aufgabe in Amazon S3 Batch Operations
- **Ressourcentypen (\*erforderlich):** [job\*](#list_s3-resource-job)
- **Bedingungsschlüssel:** [aws:RequestTag/${TagKey}](#list_s3-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_s3-aws_TagKeys)
[s3:authType](#list_s3-s3_authType)
[s3:ExistingJobOperation](#list_s3-s3_ExistingJobOperation)
[s3:ExistingJobPriority](#list_s3-s3_ExistingJobPriority)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Taggen, Schreiben
- ** [DeleteMultiRegionAccessPoint](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_DeleteMultiRegionAccessPoint.html) **
- **Description:** Erteilt die Erlaubnis zum Löschen der Multi-Region In der URI benannter Access Point
- **Ressourcentypen (\*erforderlich):** [multiregionaccesspoint\*](#list_s3-resource-multiregionaccesspoint)
- **Bedingungsschlüssel:** [s3:AccessPointNetworkOrigin](#list_s3-s3_AccessPointNetworkOrigin)
[s3:authType](#list_s3-s3_authType)
[s3:DataAccessPointAccount](#list_s3-s3_DataAccessPointAccount)
[s3:DataAccessPointArn](#list_s3-s3_DataAccessPointArn)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
- **Zugriffsebene:** Schreiben
- ** [DeleteObject](https://docs.aws.amazon.com/AmazonS3/latest/API/API_DeleteObject.html) **
- **Description:** Gewährt die Berechtigung zum Entfernen der Null-Version eines Objekts und zum Einfügen einer Löschmarkierung, die zur aktuellen Version des Objekts wird.
- **Ressourcentypen (\*erforderlich):** [accesspointobject](#list_s3-resource-accesspointobject) / **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:AccessGrantsInstanceArn](#list_s3-s3_AccessGrantsInstanceArn)
[s3:AccessPointNetworkOrigin](#list_s3-s3_AccessPointNetworkOrigin)
[s3:AccessPointTag/${TagKey}](#list_s3-s3_AccessPointTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:DataAccessPointAccount](#list_s3-s3_DataAccessPointAccount)
[s3:DataAccessPointArn](#list_s3-s3_DataAccessPointArn)
[s3:if-match](#list_s3-s3_if-match)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Ressourcentypen (\*erforderlich):** [object](#list_s3-resource-object) / **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:AccessGrantsInstanceArn](#list_s3-s3_AccessGrantsInstanceArn)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:if-match](#list_s3-s3_if-match)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Schreiben
- ** [DeleteObjectAnnotation](https://docs.aws.amazon.com/AmazonS3/latest/API/API_DeleteObjectAnnotation.html) **
- **Description:** Erteilt die Erlaubnis, eine Anmerkung aus einem Objekt zu löschen
- **Ressourcentypen (\*erforderlich):** [accesspointobject](#list_s3-resource-accesspointobject) / **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:AccessPointNetworkOrigin](#list_s3-s3_AccessPointNetworkOrigin)
[s3:AccessPointTag/${TagKey}](#list_s3-s3_AccessPointTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:DataAccessPointAccount](#list_s3-s3_DataAccessPointAccount)
[s3:DataAccessPointArn](#list_s3-s3_DataAccessPointArn)
[s3:ExistingObjectTag/](#list_s3-s3_ExistingObjectTag_key)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
[s3:x-amz-object-if-match](#list_s3-s3_x-amz-object-if-match)
- **Ressourcentypen (\*erforderlich):** [object](#list_s3-resource-object) / **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:ExistingObjectTag/](#list_s3-s3_ExistingObjectTag_key)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
[s3:x-amz-object-if-match](#list_s3-s3_x-amz-object-if-match)
- **Zugriffsebene:** Schreiben
- ** [DeleteObjectTagging](https://docs.aws.amazon.com/AmazonS3/latest/API/API_DeleteObjectTagging.html) **
- **Description:** Gewährt die Berechtigung zum Verwenden der Tagging-Unterquelle, um den gesamten Tag-Satz aus dem angegebenen Objekt zu entfernen.
- **Ressourcentypen (\*erforderlich):** [accesspointobject](#list_s3-resource-accesspointobject) / **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:AccessPointNetworkOrigin](#list_s3-s3_AccessPointNetworkOrigin)
[s3:AccessPointTag/${TagKey}](#list_s3-s3_AccessPointTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:DataAccessPointAccount](#list_s3-s3_DataAccessPointAccount)
[s3:DataAccessPointArn](#list_s3-s3_DataAccessPointArn)
[s3:ExistingObjectTag/](#list_s3-s3_ExistingObjectTag_key)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Ressourcentypen (\*erforderlich):** [object](#list_s3-resource-object) / **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:ExistingObjectTag/](#list_s3-s3_ExistingObjectTag_key)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Taggen, Schreiben
- ** [DeleteObjectVersion](https://docs.aws.amazon.com/AmazonS3/latest/API/API_DeleteObject.html) **
- **Description:** Gewährt die Berechtigung zum Entfernen einer bestimmten Version eines Objekts
- **Ressourcentypen (\*erforderlich):** [accesspointobject](#list_s3-resource-accesspointobject) / **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:AccessGrantsInstanceArn](#list_s3-s3_AccessGrantsInstanceArn)
[s3:AccessPointNetworkOrigin](#list_s3-s3_AccessPointNetworkOrigin)
[s3:AccessPointTag/${TagKey}](#list_s3-s3_AccessPointTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:DataAccessPointAccount](#list_s3-s3_DataAccessPointAccount)
[s3:DataAccessPointArn](#list_s3-s3_DataAccessPointArn)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:versionid](#list_s3-s3_versionid)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Ressourcentypen (\*erforderlich):** [object](#list_s3-resource-object) / **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:AccessGrantsInstanceArn](#list_s3-s3_AccessGrantsInstanceArn)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:versionid](#list_s3-s3_versionid)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Schreiben
- ** [DeleteObjectVersionAnnotation](https://docs.aws.amazon.com/AmazonS3/latest/API/API_DeleteObjectAnnotation.html) **
- **Description:** Erteilt die Erlaubnis, eine Anmerkung aus einer bestimmten Version eines Objekts zu löschen
- **Ressourcentypen (\*erforderlich):** [accesspointobject](#list_s3-resource-accesspointobject) / **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:AccessPointNetworkOrigin](#list_s3-s3_AccessPointNetworkOrigin)
[s3:AccessPointTag/${TagKey}](#list_s3-s3_AccessPointTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:DataAccessPointAccount](#list_s3-s3_DataAccessPointAccount)
[s3:DataAccessPointArn](#list_s3-s3_DataAccessPointArn)
[s3:ExistingObjectTag/](#list_s3-s3_ExistingObjectTag_key)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:versionid](#list_s3-s3_versionid)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
[s3:x-amz-object-if-match](#list_s3-s3_x-amz-object-if-match)
- **Ressourcentypen (\*erforderlich):** [object](#list_s3-resource-object) / **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:ExistingObjectTag/](#list_s3-s3_ExistingObjectTag_key)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:versionid](#list_s3-s3_versionid)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
[s3:x-amz-object-if-match](#list_s3-s3_x-amz-object-if-match)
- **Zugriffsebene:** Schreiben
- ** [DeleteObjectVersionTagging](https://docs.aws.amazon.com/AmazonS3/latest/API/API_DeleteObjectTagging.html) **
- **Description:** Erteilt die Berechtigung zum Entfernen des gesamten Tag-Satzes für eine bestimmte Version des Objekts
- **Ressourcentypen (\*erforderlich):** [accesspointobject](#list_s3-resource-accesspointobject) / **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:AccessPointNetworkOrigin](#list_s3-s3_AccessPointNetworkOrigin)
[s3:AccessPointTag/${TagKey}](#list_s3-s3_AccessPointTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:DataAccessPointAccount](#list_s3-s3_DataAccessPointAccount)
[s3:DataAccessPointArn](#list_s3-s3_DataAccessPointArn)
[s3:ExistingObjectTag/](#list_s3-s3_ExistingObjectTag_key)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:versionid](#list_s3-s3_versionid)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Ressourcentypen (\*erforderlich):** [object](#list_s3-resource-object) / **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:ExistingObjectTag/](#list_s3-s3_ExistingObjectTag_key)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:versionid](#list_s3-s3_versionid)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Taggen, Schreiben
- ** [DeleteStorageLensConfiguration](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_DeleteStorageLensConfiguration.html) **
- **Description:** Erteilt die Berechtigung zum Löschen einer bestehenden Amazon-S3-Storage-Lens-Konfiguration
- **Ressourcentypen (\*erforderlich):** [storagelensconfiguration\*](#list_s3-resource-storagelensconfiguration)
- **Bedingungsschlüssel:** [aws:RequestTag/${TagKey}](#list_s3-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_s3-aws_TagKeys)
[s3:authType](#list_s3-s3_authType)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Write
- ** [DeleteStorageLensConfigurationTagging](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_DeleteStorageLensConfigurationTagging.html) **
- **Description:** Erteilt die Berechtigung zum Entfernen von Markierungen aus einer vorhandenen Amazon-S3-Storage-Lens-Konfiguration
- **Ressourcentypen (\*erforderlich):** [storagelensconfiguration\*](#list_s3-resource-storagelensconfiguration)
- **Bedingungsschlüssel:** [aws:RequestTag/${TagKey}](#list_s3-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_s3-aws_TagKeys)
[s3:authType](#list_s3-s3_authType)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Taggen, Schreiben
- ** [DeleteStorageLensGroup](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_DeleteStorageLensGroup.html) **
- **Description:** Gewährt die Berechtigung zum Löschen einer bestehenden S3-Storage-Lens-Gruppe
- **Ressourcentypen (\*erforderlich):** [storagelensgroup\*](#list_s3-resource-storagelensgroup)
- **Bedingungsschlüssel:** [aws:RequestTag/${TagKey}](#list_s3-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_s3-aws_TagKeys)
[s3:authType](#list_s3-s3_authType)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Schreiben
- ** [DescribeJob](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_DescribeJob.html) **
- **Description:** Gewährt die Berechtigung zum Abrufen der Konfigurationsparameter und des Status für eine Batch-Operationsaufgabe
- **Ressourcentypen (\*erforderlich):** [job\*](#list_s3-resource-job)
- **Bedingungsschlüssel:** [aws:RequestTag/${TagKey}](#list_s3-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_s3-aws_TagKeys)
[s3:authType](#list_s3-s3_authType)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Lesen
- ** [DescribeMultiRegionAccessPointOperation](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_DescribeMultiRegionAccessPointOperation.html) **
- **Description:** Erteilt die Erlaubnis zum Abrufen der Konfigurationen für Multi-Region Zugangspunkt
- **Ressourcentypen (\*erforderlich):** [multiregionaccesspointrequestarn\*](#list_s3-resource-multiregionaccesspointrequestarn)
- **Bedingungsschlüssel:** [s3:authType](#list_s3-s3_authType)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
- **Zugriffsebene:** Lesen
- ** [DissociateAccessGrantsIdentityCenter](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_DissociateAccessGrantsIdentityCenter.html) **
- **Description:** Gewährt die Berechtigung zum Trennen von Access Grants Identity Center
- **Ressourcentypen (\*erforderlich):** [accessgrantsinstance\*](#list_s3-resource-accessgrantsinstance)
- **Bedingungsschlüssel:** [aws:RequestTag/${TagKey}](#list_s3-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_s3-aws_TagKeys)
[s3:authType](#list_s3-s3_authType)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Verwaltung von Berechtigungen, Schreiben
- ** [GetAccelerateConfiguration](https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketAccelerateConfiguration.html) **
- **Description:** Gewährt die Berechtigung zum Verwenden der Accelerate-Unterressource, um den „Transfer Acceleration“-Status eines Buckets – „Enabled“ oder „Suspended“ – zurückzugeben.
- **Ressourcentypen (\*erforderlich):** [bucket\*](#list_s3-resource-bucket)
- **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Lesen
- ** [GetAccessGrant](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetAccessGrant.html) **
- **Description:** Gewährt die Berechtigung zum Lesen von Access Grant
- **Ressourcentypen (\*erforderlich):** [accessgrant\*](#list_s3-resource-accessgrant)
- **Bedingungsschlüssel:** [aws:RequestTag/${TagKey}](#list_s3-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_s3-aws_TagKeys)
[s3:AccessGrantScope](#list_s3-s3_AccessGrantScope)
[s3:authType](#list_s3-s3_authType)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Lesen
- ** [GetAccessGrantsInstance](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetAccessGrantsInstance.html) **
- **Description:** Gewährt die Berechtigung zum Lesen der Access Grants-Instance
- **Ressourcentypen (\*erforderlich):** [accessgrantsinstance\*](#list_s3-resource-accessgrantsinstance)
- **Bedingungsschlüssel:** [aws:RequestTag/${TagKey}](#list_s3-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_s3-aws_TagKeys)
[s3:authType](#list_s3-s3_authType)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Lesen
- ** [GetAccessGrantsInstanceForPrefix](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetAccessGrantsInstanceForPrefix.html) **
- **Description:** Gewährt die Berechtigung zum Lesen der Access Grants-Instance anhand des Präfixes
- **Ressourcentypen (\*erforderlich):** [accessgrantsinstance\*](#list_s3-resource-accessgrantsinstance)
- **Bedingungsschlüssel:** [aws:RequestTag/${TagKey}](#list_s3-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_s3-aws_TagKeys)
[s3:authType](#list_s3-s3_authType)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Lesen
- ** [GetAccessGrantsInstanceResourcePolicy](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetAccessGrantsInstanceResourcePolicy.html) **
- **Description:** Gewährt die Berechtigung zum Lesen einer Access Grants Instance-Ressourcenrichtlinie
- **Ressourcentypen (\*erforderlich):** [accessgrantsinstance\*](#list_s3-resource-accessgrantsinstance)
- **Bedingungsschlüssel:** [aws:RequestTag/${TagKey}](#list_s3-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_s3-aws_TagKeys)
[s3:authType](#list_s3-s3_authType)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Lesen
- ** [GetAccessGrantsLocation](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetAccessGrantsLocation.html) **
- **Description:** Gewährt die Berechtigung zum Lesen des Access Grants-Speicherorts
- **Ressourcentypen (\*erforderlich):** [accessgrantslocation\*](#list_s3-resource-accessgrantslocation)
- **Bedingungsschlüssel:** [aws:RequestTag/${TagKey}](#list_s3-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_s3-aws_TagKeys)
[s3:AccessGrantsLocationScope](#list_s3-s3_AccessGrantsLocationScope)
[s3:authType](#list_s3-s3_authType)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Lesen
- ** [GetAccessPoint](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetAccessPoint.html) **
- **Description:** Gewährt die Berechtigung zum Zurückgeben von Konfigurationsinformationen zum angegebenen Zugriffspunkt
- **Ressourcentypen (\*erforderlich):**
- **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:AccessPointNetworkOrigin](#list_s3-s3_AccessPointNetworkOrigin)
[s3:AccessPointTag/${TagKey}](#list_s3-s3_AccessPointTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:DataAccessPointAccount](#list_s3-s3_DataAccessPointAccount)
[s3:DataAccessPointArn](#list_s3-s3_DataAccessPointArn)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Read
- ** [GetAccessPointConfigurationForObjectLambda](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetAccessPointConfigurationForObjectLambda.html) **
- **Description:** Gewährt die Berechtigung zum Abrufen der Konfiguration des Objekt-Lambda-fähigen Zugriffspunkts
- **Ressourcentypen (\*erforderlich):** [objectlambdaaccesspoint\*](#list_s3-resource-objectlambdaaccesspoint)
- **Bedingungsschlüssel:** [s3:AccessPointNetworkOrigin](#list_s3-s3_AccessPointNetworkOrigin)
[s3:authType](#list_s3-s3_authType)
[s3:DataAccessPointAccount](#list_s3-s3_DataAccessPointAccount)
[s3:DataAccessPointArn](#list_s3-s3_DataAccessPointArn)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Read
- ** [GetAccessPointForObjectLambda](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetAccessPointForObjectLambda.html) **
- **Description:** Gewährt die Berechtigung zum Erstellen eines Objekt-Lambda-fähigen Zugriffspunkts
- **Ressourcentypen (\*erforderlich):** [objectlambdaaccesspoint\*](#list_s3-resource-objectlambdaaccesspoint)
- **Bedingungsschlüssel:** [s3:AccessPointNetworkOrigin](#list_s3-s3_AccessPointNetworkOrigin)
[s3:authType](#list_s3-s3_authType)
[s3:DataAccessPointAccount](#list_s3-s3_DataAccessPointAccount)
[s3:DataAccessPointArn](#list_s3-s3_DataAccessPointArn)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Lesen
- ** [GetAccessPointPolicy](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetAccessPointPolicy.html) **
- **Description:** Erteilt die Erlaubnis, die dem angegebenen Access Point zugeordnete Access Point-Richtlinie zurückzugeben
- **Ressourcentypen (\*erforderlich):** [accesspoint\*](#list_s3-resource-accesspoint)
- **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:AccessPointNetworkOrigin](#list_s3-s3_AccessPointNetworkOrigin)
[s3:AccessPointTag/${TagKey}](#list_s3-s3_AccessPointTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:DataAccessPointAccount](#list_s3-s3_DataAccessPointAccount)
[s3:DataAccessPointArn](#list_s3-s3_DataAccessPointArn)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Lesen
- ** [GetAccessPointPolicyForObjectLambda](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetAccessPointPolicyForObjectLambda.html) **
- **Description:** Erteilt die Berechtigung, die dem angegebenen Objekt zugeordnete Zugriffspunktrichtlinie zurückzugeben, die für Lambda aktiviert ist
- **Ressourcentypen (\*erforderlich):** [objectlambdaaccesspoint\*](#list_s3-resource-objectlambdaaccesspoint)
- **Bedingungsschlüssel:** [s3:AccessPointNetworkOrigin](#list_s3-s3_AccessPointNetworkOrigin)
[s3:authType](#list_s3-s3_authType)
[s3:DataAccessPointAccount](#list_s3-s3_DataAccessPointAccount)
[s3:DataAccessPointArn](#list_s3-s3_DataAccessPointArn)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Lesen
- ** [GetAccessPointPolicyStatus](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetAccessPointPolicyStatus.html) **
- **Description:** Gewährt die Berechtigung zum Zurückgeben des Richtlinienstatus für eine bestimmte Zugriffspunktrichtlinie
- **Ressourcentypen (\*erforderlich):** [accesspoint\*](#list_s3-resource-accesspoint)
- **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:AccessPointNetworkOrigin](#list_s3-s3_AccessPointNetworkOrigin)
[s3:AccessPointTag/${TagKey}](#list_s3-s3_AccessPointTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:DataAccessPointAccount](#list_s3-s3_DataAccessPointAccount)
[s3:DataAccessPointArn](#list_s3-s3_DataAccessPointArn)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Read
- ** [GetAccessPointPolicyStatusForObjectLambda](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetAccessPointPolicyStatusForObjectLambda.html) **
- **Description:** Gewährt die Berechtigung zum Zurückgeben des Richtlinienstatus für eine bestimmte Objekt-Lambda-Zugriffspunktrichtlinie
- **Ressourcentypen (\*erforderlich):** [objectlambdaaccesspoint\*](#list_s3-resource-objectlambdaaccesspoint)
- **Bedingungsschlüssel:** [s3:AccessPointNetworkOrigin](#list_s3-s3_AccessPointNetworkOrigin)
[s3:authType](#list_s3-s3_authType)
[s3:DataAccessPointAccount](#list_s3-s3_DataAccessPointAccount)
[s3:DataAccessPointArn](#list_s3-s3_DataAccessPointArn)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Lesen
- ** [GetAccountPublicAccessBlock](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetPublicAccessBlock.html) **
- **Description:** Erteilt die Erlaubnis zum Abrufen von PublicAccessBlock Konfiguration für eine AWS-Konto
- **Ressourcentypen (\*erforderlich):**
- **Bedingungsschlüssel:** [s3:authType](#list_s3-s3_authType)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Lesen
- ** [GetAnalyticsConfiguration](https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketAnalyticsConfiguration.html) **
- **Description:** Erteilt die Berechtigung zum Abrufen einer Analytics-Konfiguration aus einem Amazon-S3-Bucket, identifiziert durch die Analytics-Konfigurations-ID
- **Ressourcentypen (\*erforderlich):** [bucket\*](#list_s3-resource-bucket)
- **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Lesen
- ** [GetBucketAbac](https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketAbac.html) **
- **Description:** Erteilt die Erlaubnis, die ABAC-Konfiguration für einen Allzweck-Bucket abzurufen
- **Ressourcentypen (\*erforderlich):** [bucket\*](#list_s3-resource-bucket)
- **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Lesen
- ** [GetBucketAcl](https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketAcl.html) **
- **Description:** Erteilt die Berechtigung zum Verwenden der ACL-Unterquelle zum Zurückgeben der Zugriffskontrollliste (Access Control List, ACL) eines Amazon-S3-Buckets
- **Ressourcentypen (\*erforderlich):** [accesspoint](#list_s3-resource-accesspoint) / **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:AccessPointNetworkOrigin](#list_s3-s3_AccessPointNetworkOrigin)
[s3:AccessPointTag/${TagKey}](#list_s3-s3_AccessPointTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:DataAccessPointAccount](#list_s3-s3_DataAccessPointAccount)
[s3:DataAccessPointArn](#list_s3-s3_DataAccessPointArn)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Ressourcentypen (\*erforderlich):** [bucket](#list_s3-resource-bucket) / **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Read
- ** [GetBucketCORS](https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketCors.html) **
- **Description:** Erteilt die Berechtigung zum Zurückgeben der CORS-Konfigurationsinformationen für einen Amazon-S3-Bucket
- **Ressourcentypen (\*erforderlich):** [accesspoint](#list_s3-resource-accesspoint) / **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:AccessPointNetworkOrigin](#list_s3-s3_AccessPointNetworkOrigin)
[s3:AccessPointTag/${TagKey}](#list_s3-s3_AccessPointTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:DataAccessPointAccount](#list_s3-s3_DataAccessPointAccount)
[s3:DataAccessPointArn](#list_s3-s3_DataAccessPointArn)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Ressourcentypen (\*erforderlich):** [bucket](#list_s3-resource-bucket) / **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Read
- ** [GetBucketLocation](https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketLocation.html) **
- **Description:** Erteilt die Berechtigung zum Zurückgeben der Region, in der sich ein Amazon-S3-Bucket befindet.
- **Ressourcentypen (\*erforderlich):** [accesspoint](#list_s3-resource-accesspoint) / **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:AccessPointNetworkOrigin](#list_s3-s3_AccessPointNetworkOrigin)
[s3:AccessPointTag/${TagKey}](#list_s3-s3_AccessPointTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:DataAccessPointAccount](#list_s3-s3_DataAccessPointAccount)
[s3:DataAccessPointArn](#list_s3-s3_DataAccessPointArn)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Ressourcentypen (\*erforderlich):** [bucket](#list_s3-resource-bucket) / **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Read
- ** [GetBucketLogging](https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketLogging.html) **
- **Description:** Erteilt die Berechtigung zum Zurückgeben des Protokollierungsstatus eines Amazon-S3-Buckets und der Berechtigungen, die Benutzer zum Anzeigen oder Ändern dieses Status haben
- **Ressourcentypen (\*erforderlich):** [bucket\*](#list_s3-resource-bucket)
- **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Lesen
- ** [GetBucketMetadataTableConfiguration](https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketMetadataConfiguration.html) **
- **Description:** Erteilt die Erlaubnis, die S3-Metadatenkonfiguration für einen bestimmten Allzweck-Bucket zurückzugeben
- **Ressourcentypen (\*erforderlich):** [bucket\*](#list_s3-resource-bucket)
- **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Lesen
- ** [GetBucketNotification](https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketNotification.html) **
- **Description:** Erteilt die Berechtigung zum Abrufen der Benachrichtigungskonfiguration eines Amazon-S3-Buckets
- **Ressourcentypen (\*erforderlich):** [accesspoint](#list_s3-resource-accesspoint) / **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:AccessPointNetworkOrigin](#list_s3-s3_AccessPointNetworkOrigin)
[s3:AccessPointTag/${TagKey}](#list_s3-s3_AccessPointTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:DataAccessPointAccount](#list_s3-s3_DataAccessPointAccount)
[s3:DataAccessPointArn](#list_s3-s3_DataAccessPointArn)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Ressourcentypen (\*erforderlich):** [bucket](#list_s3-resource-bucket) / **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Read
- ** [GetBucketObjectLockConfiguration](https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetObjectLockConfiguration.html) **
- **Description:** Erteilt die Berechtigung zum Abrufen der Object Lock-Konfiguration eines Amazon-S3-Buckets
- **Ressourcentypen (\*erforderlich):** [bucket\*](#list_s3-resource-bucket)
- **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
- **Zugriffsebene:** Read
- ** [GetBucketOwnershipControls](https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketOwnershipControls.html) **
- **Description:** Gewährt die Berechtigung zum Abrufen von Kontrollen zur Eigentümerschaft in einem Bucket
- **Ressourcentypen (\*erforderlich):** [bucket\*](#list_s3-resource-bucket)
- **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Read
- ** [GetBucketPolicy](https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketPolicy.html) **
- **Description:** Gewährt die Berechtigung zum Zurückgeben der Richtlinie des angegebenen Buckets
- **Ressourcentypen (\*erforderlich):** [accesspoint](#list_s3-resource-accesspoint) / **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:AccessPointNetworkOrigin](#list_s3-s3_AccessPointNetworkOrigin)
[s3:AccessPointTag/${TagKey}](#list_s3-s3_AccessPointTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:DataAccessPointAccount](#list_s3-s3_DataAccessPointAccount)
[s3:DataAccessPointArn](#list_s3-s3_DataAccessPointArn)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Ressourcentypen (\*erforderlich):** [bucket](#list_s3-resource-bucket) / **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Read
- ** [GetBucketPolicyStatus](https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketPolicyStatus.html) **
- **Description:** Erteilt die Berechtigung zum Abrufen des Richtlinienstatus für einen bestimmten Amazon-S3-Bucket, der angibt, ob der Bucket öffentlich ist
- **Ressourcentypen (\*erforderlich):** [bucket\*](#list_s3-resource-bucket)
- **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Lesen
- ** [GetBucketPublicAccessBlock](https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetPublicAccessBlock.html) **
- **Description:** Erteilt die Erlaubnis zum Abrufen von PublicAccessBlock Konfiguration für einen Amazon S3-Bucket
- **Ressourcentypen (\*erforderlich):** [bucket\*](#list_s3-resource-bucket)
- **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Lesen
- ** [GetBucketRequestPayment](https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketRequestPayment.html) **
- **Description:** Erteilt die Berechtigung zum Zurückgeben der Anforderungszahlungskonfiguration für einen Amazon-S3-Bucket
- **Ressourcentypen (\*erforderlich):** [bucket\*](#list_s3-resource-bucket)
- **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Read
- ** [GetBucketTagging](https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketTagging.html) **
- **Description:** Erteilt die Berechtigung zum Zurückgeben des Tag-Satzes, der einem Amazon-S3-Bucket zugeordnet ist
- **Ressourcentypen (\*erforderlich):** [bucket\*](#list_s3-resource-bucket)
- **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Read
- ** [GetBucketVersioning](https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketVersioning.html) **
- **Description:** Erteilt die Berechtigung zum Zurückgeben des Versionssteuerungsstatus eines Amazon-S3-Buckets
- **Ressourcentypen (\*erforderlich):** [bucket\*](#list_s3-resource-bucket)
- **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Read
- ** [GetBucketWebsite](https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketWebsite.html) **
- **Description:** Erteilt die Berechtigung zum Zurückgeben der Website-Konfiguration für einen Amazon-S3-Bucket
- **Ressourcentypen (\*erforderlich):** [bucket\*](#list_s3-resource-bucket)
- **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Lesen
- ** [GetDataAccess](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetDataAccess.html) **
- **Description:** Gewährt die Berechtigung zum Zugriff
- **Ressourcentypen (\*erforderlich):** [accessgrantsinstance\*](#list_s3-resource-accessgrantsinstance)
- **Bedingungsschlüssel:** [aws:RequestTag/${TagKey}](#list_s3-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_s3-aws_TagKeys)
[s3:authType](#list_s3-s3_authType)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Lesen
- ** [GetEncryptionConfiguration](https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketEncryption.html) **
- **Description:** Erteilt die Berechtigung zum Zurückgeben der Standard-Verschlüsselungskonfiguration eines Amazon-S3-Buckets
- **Ressourcentypen (\*erforderlich):** [bucket\*](#list_s3-resource-bucket)
- **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Read
- ** [GetIntelligentTieringConfiguration](https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketIntelligentTieringConfiguration.html) **
- **Description:** Gewährt die Berechtigung zum Abrufen oder Auflisten aller Amazon S3 Intelligent Tiering-Konfigurationen in einem S3-Bucket
- **Ressourcentypen (\*erforderlich):** [bucket\*](#list_s3-resource-bucket)
- **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Read
- ** [GetInventoryConfiguration](https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketInventoryConfiguration.html) **
- **Description:** Erteilt die Berechtigung zum Zurückgeben einer Inventarkonfiguration aus einem Amazon-S3-Bucket, die durch die Inventarkonfigurations-ID gekennzeichnet ist.
- **Ressourcentypen (\*erforderlich):** [bucket\*](#list_s3-resource-bucket)
- **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Read
- ** [GetJobTagging](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetJobTagging.html) **
- **Description:** Erteilt die Berechtigung zum Zurückgeben des Tag-Satzes eines vorhandenen Auftrags in Amazon S3 Batch Operations
- **Ressourcentypen (\*erforderlich):** [job\*](#list_s3-resource-job)
- **Bedingungsschlüssel:** [aws:RequestTag/${TagKey}](#list_s3-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_s3-aws_TagKeys)
[s3:authType](#list_s3-s3_authType)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Read
- ** [GetLifecycleConfiguration](https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketLifecycleConfiguration.html) **
- **Description:** Erteilt die Berechtigung zum Zurückgeben der Lebenszyklus-Konfigurationsinformationen, die in einem Amazon-S3-Bucket festgelegt sind.
- **Ressourcentypen (\*erforderlich):** [bucket\*](#list_s3-resource-bucket)
- **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Read
- ** [GetMetricsConfiguration](https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketMetricsConfiguration.html) **
- **Description:** Erteilt die Berechtigung zum Abrufen einer Metrik-Konfiguration aus einem Amazon-S3-Bucket
- **Ressourcentypen (\*erforderlich):** [bucket\*](#list_s3-resource-bucket)
- **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Lesen
- ** [GetMultiRegionAccessPoint](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetMultiRegionAccessPoint.html) **
- **Description:** Erteilt die Erlaubnis, Konfigurationsinformationen über das angegebene Objekt zurückzugeben Multi-Region Zugangspunkt
- **Ressourcentypen (\*erforderlich):** [multiregionaccesspoint\*](#list_s3-resource-multiregionaccesspoint)
- **Bedingungsschlüssel:** [s3:AccessPointNetworkOrigin](#list_s3-s3_AccessPointNetworkOrigin)
[s3:authType](#list_s3-s3_authType)
[s3:DataAccessPointAccount](#list_s3-s3_DataAccessPointAccount)
[s3:DataAccessPointArn](#list_s3-s3_DataAccessPointArn)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
- **Zugriffsebene:** Lesen
- ** [GetMultiRegionAccessPointPolicy](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetMultiRegionAccessPointPolicy.html) **
- **Description:** Erteilt die Erlaubnis, die Access Point-Richtlinie zurückzugeben, die dem angegebenen Objekt zugeordnet ist Multi-Region Access Point
- **Ressourcentypen (\*erforderlich):** [multiregionaccesspoint\*](#list_s3-resource-multiregionaccesspoint)
- **Bedingungsschlüssel:** [s3:AccessPointNetworkOrigin](#list_s3-s3_AccessPointNetworkOrigin)
[s3:authType](#list_s3-s3_authType)
[s3:DataAccessPointAccount](#list_s3-s3_DataAccessPointAccount)
[s3:DataAccessPointArn](#list_s3-s3_DataAccessPointArn)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
- **Zugriffsebene:** Lesen
- ** [GetMultiRegionAccessPointPolicyStatus](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetMultiRegionAccessPointPolicyStatus.html) **
- **Description:** Erteilt die Erlaubnis, den Versicherungsstatus für eine bestimmte Person zurückzugeben Multi-Region Access Point-Richtlinie
- **Ressourcentypen (\*erforderlich):** [multiregionaccesspoint\*](#list_s3-resource-multiregionaccesspoint)
- **Bedingungsschlüssel:** [s3:AccessPointNetworkOrigin](#list_s3-s3_AccessPointNetworkOrigin)
[s3:authType](#list_s3-s3_authType)
[s3:DataAccessPointAccount](#list_s3-s3_DataAccessPointAccount)
[s3:DataAccessPointArn](#list_s3-s3_DataAccessPointArn)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
- **Zugriffsebene:** Lesen
- ** [GetMultiRegionAccessPointRoutes](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetMultiRegionAccessPointRoutes.html) **
- **Description:** Erteilt die Erlaubnis, die Routenkonfiguration für eine zurückzugeben Multi-Region Zugangspunkt
- **Ressourcentypen (\*erforderlich):** [multiregionaccesspoint\*](#list_s3-resource-multiregionaccesspoint)
- **Bedingungsschlüssel:** [s3:AccessPointNetworkOrigin](#list_s3-s3_AccessPointNetworkOrigin)
[s3:authType](#list_s3-s3_authType)
[s3:DataAccessPointAccount](#list_s3-s3_DataAccessPointAccount)
[s3:DataAccessPointArn](#list_s3-s3_DataAccessPointArn)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
- **Zugriffsebene:** Lesen
- ** [GetObject](https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetObject.html) **
- **Description:** Gewährt die Berechtigung zum Abrufen von Objekten aus Amazon S3
- **Ressourcentypen (\*erforderlich):** [accesspointobject](#list_s3-resource-accesspointobject) / **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:AccessGrantsInstanceArn](#list_s3-s3_AccessGrantsInstanceArn)
[s3:AccessPointNetworkOrigin](#list_s3-s3_AccessPointNetworkOrigin)
[s3:AccessPointTag/${TagKey}](#list_s3-s3_AccessPointTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:DataAccessPointAccount](#list_s3-s3_DataAccessPointAccount)
[s3:DataAccessPointArn](#list_s3-s3_DataAccessPointArn)
[s3:ExistingObjectTag/](#list_s3-s3_ExistingObjectTag_key)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Ressourcentypen (\*erforderlich):** [object](#list_s3-resource-object) / **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:AccessGrantsInstanceArn](#list_s3-s3_AccessGrantsInstanceArn)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:ExistingObjectTag/](#list_s3-s3_ExistingObjectTag_key)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Read
- ** [GetObjectAcl](https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetObjectAcl.html) **
- **Description:** Gewährt die Berechtigung zum Zurückgeben der Zugriffskontrollliste (Access Control List, ACL) eines Objekts
- **Ressourcentypen (\*erforderlich):** [accesspointobject](#list_s3-resource-accesspointobject) / **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:AccessGrantsInstanceArn](#list_s3-s3_AccessGrantsInstanceArn)
[s3:AccessPointNetworkOrigin](#list_s3-s3_AccessPointNetworkOrigin)
[s3:AccessPointTag/${TagKey}](#list_s3-s3_AccessPointTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:DataAccessPointAccount](#list_s3-s3_DataAccessPointAccount)
[s3:DataAccessPointArn](#list_s3-s3_DataAccessPointArn)
[s3:ExistingObjectTag/](#list_s3-s3_ExistingObjectTag_key)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Ressourcentypen (\*erforderlich):** [object](#list_s3-resource-object) / **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:AccessGrantsInstanceArn](#list_s3-s3_AccessGrantsInstanceArn)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:ExistingObjectTag/](#list_s3-s3_ExistingObjectTag_key)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Lesen
- ** [GetObjectAnnotation](https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetObjectAnnotation.html) **
- **Description:** Erteilt die Erlaubnis, eine Anmerkung von einem Objekt abzurufen
- **Ressourcentypen (\*erforderlich):** [accesspointobject](#list_s3-resource-accesspointobject) / **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:AccessPointNetworkOrigin](#list_s3-s3_AccessPointNetworkOrigin)
[s3:AccessPointTag/${TagKey}](#list_s3-s3_AccessPointTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:DataAccessPointAccount](#list_s3-s3_DataAccessPointAccount)
[s3:DataAccessPointArn](#list_s3-s3_DataAccessPointArn)
[s3:ExistingObjectTag/](#list_s3-s3_ExistingObjectTag_key)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Ressourcentypen (\*erforderlich):** [object](#list_s3-resource-object) / **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:ExistingObjectTag/](#list_s3-s3_ExistingObjectTag_key)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Lesen
- ** [GetObjectAttributes](https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetObjectAttributes.html) **
- **Description:** Gewährt die Berechtigung zum Abrufen von Attributen, die sich auf ein bestimmtes Objekt beziehen
- **Ressourcentypen (\*erforderlich):** [accesspointobject](#list_s3-resource-accesspointobject) / **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:AccessPointNetworkOrigin](#list_s3-s3_AccessPointNetworkOrigin)
[s3:AccessPointTag/${TagKey}](#list_s3-s3_AccessPointTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:DataAccessPointAccount](#list_s3-s3_DataAccessPointAccount)
[s3:DataAccessPointArn](#list_s3-s3_DataAccessPointArn)
[s3:ExistingObjectTag/](#list_s3-s3_ExistingObjectTag_key)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Ressourcentypen (\*erforderlich):** [object](#list_s3-resource-object) / **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:ExistingObjectTag/](#list_s3-s3_ExistingObjectTag_key)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Lesen
- ** [GetObjectLegalHold](https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetObjectLegalHold.html) **
- **Description:** Gewährt die Berechtigung zum Abrufen des aktuellen „Legal Hold“-Status eines Objekts
- **Ressourcentypen (\*erforderlich):** [accesspointobject](#list_s3-resource-accesspointobject) / **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:AccessPointNetworkOrigin](#list_s3-s3_AccessPointNetworkOrigin)
[s3:AccessPointTag/${TagKey}](#list_s3-s3_AccessPointTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:DataAccessPointAccount](#list_s3-s3_DataAccessPointAccount)
[s3:DataAccessPointArn](#list_s3-s3_DataAccessPointArn)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Ressourcentypen (\*erforderlich):** [object](#list_s3-resource-object) / **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Read
- ** [GetObjectRetention](https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetObjectRetention.html) **
- **Description:** Gewährt die Berechtigung zum Abrufen der Aufbewahrungseinstellungen für ein Objekt
- **Ressourcentypen (\*erforderlich):** [accesspointobject](#list_s3-resource-accesspointobject) / **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:AccessPointNetworkOrigin](#list_s3-s3_AccessPointNetworkOrigin)
[s3:AccessPointTag/${TagKey}](#list_s3-s3_AccessPointTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:DataAccessPointAccount](#list_s3-s3_DataAccessPointAccount)
[s3:DataAccessPointArn](#list_s3-s3_DataAccessPointArn)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Ressourcentypen (\*erforderlich):** [object](#list_s3-resource-object) / **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Read
- ** [GetObjectTagging](https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetObjectTagging.html) **
- **Description:** Erteilt die Berechtigung zum Zurückgeben des Tag-Satzes eines Objekts
- **Ressourcentypen (\*erforderlich):** [accesspointobject](#list_s3-resource-accesspointobject) / **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:AccessPointNetworkOrigin](#list_s3-s3_AccessPointNetworkOrigin)
[s3:AccessPointTag/${TagKey}](#list_s3-s3_AccessPointTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:DataAccessPointAccount](#list_s3-s3_DataAccessPointAccount)
[s3:DataAccessPointArn](#list_s3-s3_DataAccessPointArn)
[s3:ExistingObjectTag/](#list_s3-s3_ExistingObjectTag_key)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Ressourcentypen (\*erforderlich):** [object](#list_s3-resource-object) / **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:ExistingObjectTag/](#list_s3-s3_ExistingObjectTag_key)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Read
- ** [GetObjectTorrent](https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetObjectTorrent.html) **
- **Description:** Gewährt die Berechtigung zum Zurückgeben von Torrent-Dateien aus einem Amazon-S3-Bucket
- **Ressourcentypen (\*erforderlich):** [object\*](#list_s3-resource-object)
- **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Read
- ** [GetObjectVersion](https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetObject.html) **
- **Description:** Gewährt die Berechtigung zum Abrufen einer bestimmten Version eines Objekts
- **Ressourcentypen (\*erforderlich):** [accesspointobject](#list_s3-resource-accesspointobject) / **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:AccessGrantsInstanceArn](#list_s3-s3_AccessGrantsInstanceArn)
[s3:AccessPointNetworkOrigin](#list_s3-s3_AccessPointNetworkOrigin)
[s3:AccessPointTag/${TagKey}](#list_s3-s3_AccessPointTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:DataAccessPointAccount](#list_s3-s3_DataAccessPointAccount)
[s3:DataAccessPointArn](#list_s3-s3_DataAccessPointArn)
[s3:ExistingObjectTag/](#list_s3-s3_ExistingObjectTag_key)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:versionid](#list_s3-s3_versionid)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Ressourcentypen (\*erforderlich):** [object](#list_s3-resource-object) / **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:AccessGrantsInstanceArn](#list_s3-s3_AccessGrantsInstanceArn)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:ExistingObjectTag/](#list_s3-s3_ExistingObjectTag_key)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:versionid](#list_s3-s3_versionid)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Read
- ** [GetObjectVersionAcl](https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetObjectAcl.html) **
- **Description:** Gewährt die Berechtigung zum Zurückgeben der Zugriffskontrollliste (Access Control List, ACL) einer bestimmten Objektversion
- **Ressourcentypen (\*erforderlich):** [accesspointobject](#list_s3-resource-accesspointobject) / **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:AccessGrantsInstanceArn](#list_s3-s3_AccessGrantsInstanceArn)
[s3:AccessPointNetworkOrigin](#list_s3-s3_AccessPointNetworkOrigin)
[s3:AccessPointTag/${TagKey}](#list_s3-s3_AccessPointTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:DataAccessPointAccount](#list_s3-s3_DataAccessPointAccount)
[s3:DataAccessPointArn](#list_s3-s3_DataAccessPointArn)
[s3:ExistingObjectTag/](#list_s3-s3_ExistingObjectTag_key)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:versionid](#list_s3-s3_versionid)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Ressourcentypen (\*erforderlich):** [object](#list_s3-resource-object) / **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:AccessGrantsInstanceArn](#list_s3-s3_AccessGrantsInstanceArn)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:ExistingObjectTag/](#list_s3-s3_ExistingObjectTag_key)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:versionid](#list_s3-s3_versionid)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Lesen
- ** [GetObjectVersionAnnotation](https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetObjectAnnotation.html) **
- **Description:** Erteilt die Erlaubnis, eine Anmerkung aus einer bestimmten Version eines Objekts abzurufen
- **Ressourcentypen (\*erforderlich):** [accesspointobject](#list_s3-resource-accesspointobject) / **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:AccessPointNetworkOrigin](#list_s3-s3_AccessPointNetworkOrigin)
[s3:AccessPointTag/${TagKey}](#list_s3-s3_AccessPointTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:DataAccessPointAccount](#list_s3-s3_DataAccessPointAccount)
[s3:DataAccessPointArn](#list_s3-s3_DataAccessPointArn)
[s3:ExistingObjectTag/](#list_s3-s3_ExistingObjectTag_key)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:versionid](#list_s3-s3_versionid)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Ressourcentypen (\*erforderlich):** [object](#list_s3-resource-object) / **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:ExistingObjectTag/](#list_s3-s3_ExistingObjectTag_key)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:versionid](#list_s3-s3_versionid)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Lesen
- ** [GetObjectVersionAnnotationForReplication](https://docs.aws.amazon.com/AmazonS3/latest/userguide/setting-repl-config-perm-overview.html) **
- **Description:** Erteilt die Erlaubnis, eine Anmerkung zur Objektversion zur Replikation abzurufen
- **Ressourcentypen (\*erforderlich):** [object\*](#list_s3-resource-object)
- **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Lesen
- ** [GetObjectVersionAttributes](https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetObjectAttributes.html) **
- **Description:** Gewährt die Berechtigung zum Abrufen von Attributen, die sich auf eine bestimmte Version eines Objekts beziehen
- **Ressourcentypen (\*erforderlich):** [accesspointobject](#list_s3-resource-accesspointobject) / **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:AccessPointNetworkOrigin](#list_s3-s3_AccessPointNetworkOrigin)
[s3:AccessPointTag/${TagKey}](#list_s3-s3_AccessPointTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:DataAccessPointAccount](#list_s3-s3_DataAccessPointAccount)
[s3:DataAccessPointArn](#list_s3-s3_DataAccessPointArn)
[s3:ExistingObjectTag/](#list_s3-s3_ExistingObjectTag_key)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:versionid](#list_s3-s3_versionid)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Ressourcentypen (\*erforderlich):** [object](#list_s3-resource-object) / **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:ExistingObjectTag/](#list_s3-s3_ExistingObjectTag_key)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:versionid](#list_s3-s3_versionid)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Lesen
- ** [GetObjectVersionForReplication](https://docs.aws.amazon.com/AmazonS3/latest/userguide/replication-config-for-kms-objects.html) **
- **Description:** Erteilt die Berechtigung, sowohl unverschlüsselte als auch mit verschlüsselte Objekte zu replizieren SSE-S3 oder SSE-KMS
- **Ressourcentypen (\*erforderlich):** [object\*](#list_s3-resource-object)
- **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Lesen
- ** [GetObjectVersionTagging](https://docs.aws.amazon.com/AmazonS3/latest/userguide/setting-repl-config-perm-overview.html) **
- **Description:** Erteilt die Berechtigung zum Zurückgeben des Tag-Satzes für eine bestimmte Version des Objekts
- **Ressourcentypen (\*erforderlich):** [accesspointobject](#list_s3-resource-accesspointobject) / **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:AccessPointNetworkOrigin](#list_s3-s3_AccessPointNetworkOrigin)
[s3:AccessPointTag/${TagKey}](#list_s3-s3_AccessPointTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:DataAccessPointAccount](#list_s3-s3_DataAccessPointAccount)
[s3:DataAccessPointArn](#list_s3-s3_DataAccessPointArn)
[s3:ExistingObjectTag/](#list_s3-s3_ExistingObjectTag_key)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:versionid](#list_s3-s3_versionid)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Ressourcentypen (\*erforderlich):** [object](#list_s3-resource-object) / **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:ExistingObjectTag/](#list_s3-s3_ExistingObjectTag_key)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:versionid](#list_s3-s3_versionid)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Read
- ** [GetObjectVersionTorrent](https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetObjectTorrent.html) **
- **Description:** Gewährt die Berechtigung zum Abrufen von Torrent-Dateien zu einer anderen Version mithilfe der VersionID-Unterquelle
- **Ressourcentypen (\*erforderlich):** [object\*](#list_s3-resource-object)
- **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:versionid](#list_s3-s3_versionid)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Read
- ** [GetReplicationConfiguration](https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketReplication.html) **
- **Description:** Erteilt die Berechtigung zum Abrufen der in einem Amazon-S3-Bucket festgelegten Replikations-Konfigurationsinformationen
- **Ressourcentypen (\*erforderlich):** [bucket\*](#list_s3-resource-bucket)
- **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Read
- ** [GetStorageLensConfiguration](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetStorageLensConfiguration.html) **
- **Description:** Erteilt die Berechtigung zum Abrufen einer Amazon-S3-Storage-Lens-Konfiguration
- **Ressourcentypen (\*erforderlich):** [storagelensconfiguration\*](#list_s3-resource-storagelensconfiguration)
- **Bedingungsschlüssel:** [aws:RequestTag/${TagKey}](#list_s3-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_s3-aws_TagKeys)
[s3:authType](#list_s3-s3_authType)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Read
- ** [GetStorageLensConfigurationTagging](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetStorageLensConfigurationTagging.html) **
- **Description:** Erteilt die Berechtigung zum Abrufen des Tag-Satzes einer bestehenden Amazon-S3-Storage-Lens-Konfiguration
- **Ressourcentypen (\*erforderlich):** [storagelensconfiguration\*](#list_s3-resource-storagelensconfiguration)
- **Bedingungsschlüssel:** [aws:RequestTag/${TagKey}](#list_s3-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_s3-aws_TagKeys)
[s3:authType](#list_s3-s3_authType)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Read
- ** [GetStorageLensDashboard](https://docs.aws.amazon.com/AmazonS3/latest/userguide/storage_lens_dashboard.html) **
- **Description:** Erteilt die Berechtigung zum Abrufen eines Amazon-S3-Storage-Lens-Dashboards
- **Ressourcentypen (\*erforderlich):** [storagelensconfiguration\*](#list_s3-resource-storagelensconfiguration)
- **Bedingungsschlüssel:** [aws:RequestTag/${TagKey}](#list_s3-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_s3-aws_TagKeys)
[s3:authType](#list_s3-s3_authType)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Lesen
- ** [GetStorageLensGroup](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetStorageLensGroup.html) **
- **Description:** Gewährt die Berechtigung zum Abrufen einer Amazon-S3-Storage-Lens-Gruppe
- **Ressourcentypen (\*erforderlich):** [storagelensgroup\*](#list_s3-resource-storagelensgroup)
- **Bedingungsschlüssel:** [aws:RequestTag/${TagKey}](#list_s3-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_s3-aws_TagKeys)
[s3:authType](#list_s3-s3_authType)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Lesen
- ** [ListAccessGrants](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_ListAccessGrants.html) **
- **Description:** Gewährt die Berechtigung zum Auflisten von Access Grant
- **Ressourcentypen (\*erforderlich):** [accessgrantsinstance\*](#list_s3-resource-accessgrantsinstance)
- **Bedingungsschlüssel:** [aws:RequestTag/${TagKey}](#list_s3-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_s3-aws_TagKeys)
[s3:authType](#list_s3-s3_authType)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Auflisten
- ** [ListAccessGrantsInstances](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_ListAccessGrantsInstances.html) **
- **Description:** Gewährt die Berechtigung zum Auflisten von Access Grants-Instances
- **Ressourcentypen (\*erforderlich):**
- **Bedingungsschlüssel:** [s3:authType](#list_s3-s3_authType)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Auflisten
- ** [ListAccessGrantsLocations](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_ListAccessGrantsLocations.html) **
- **Description:** Gewährt die Berechtigung zum Auflisten von Access Grants-Speicherorten
- **Ressourcentypen (\*erforderlich):** [accessgrantsinstance\*](#list_s3-resource-accessgrantsinstance)
- **Bedingungsschlüssel:** [aws:RequestTag/${TagKey}](#list_s3-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_s3-aws_TagKeys)
[s3:authType](#list_s3-s3_authType)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Auflisten
- ** [ListAccessPoints](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_ListAccessPoints.html) **
- **Description:** Gewährt die Berechtigung zum Auflisten von Zugriffspunkten
- **Ressourcentypen (\*erforderlich):**
- **Bedingungsschlüssel:** [s3:authType](#list_s3-s3_authType)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Auflisten
- ** [ListAccessPointsForObjectLambda](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_ListAccessPointsForObjectLambda.html) **
- **Description:** Gewährt die Berechtigung zum Auflisten von Objekt-Lambda-fähigen Zugriffspunkten
- **Ressourcentypen (\*erforderlich):**
- **Bedingungsschlüssel:** [s3:authType](#list_s3-s3_authType)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Auflisten
- ** [ListAllMyBuckets](https://docs.aws.amazon.com/AmazonS3/latest/API/API_ListBuckets.html) **
- **Description:** Gewährt die Berechtigung zum Auflisten aller Buckets, die dem authentifizierten Sender der Anforderung gehören.
- **Ressourcentypen (\*erforderlich):**
- **Bedingungsschlüssel:** [s3:authType](#list_s3-s3_authType)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** List
- ** [ListBucket](https://docs.aws.amazon.com/AmazonS3/latest/API/API_ListObjectsV2.html) **
- **Description:** Erteilt die Berechtigung zum Auflisten einiger oder aller Objekte in einem Amazon-S3-Bucket (bis zu 1000)
- **Ressourcentypen (\*erforderlich):** [accesspoint](#list_s3-resource-accesspoint) / **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:AccessGrantsInstanceArn](#list_s3-s3_AccessGrantsInstanceArn)
[s3:AccessPointNetworkOrigin](#list_s3-s3_AccessPointNetworkOrigin)
[s3:AccessPointTag/${TagKey}](#list_s3-s3_AccessPointTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:DataAccessPointAccount](#list_s3-s3_DataAccessPointAccount)
[s3:DataAccessPointArn](#list_s3-s3_DataAccessPointArn)
[s3:delimiter](#list_s3-s3_delimiter)
[s3:max-keys](#list_s3-s3_max-keys)
[s3:prefix](#list_s3-s3_prefix)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Ressourcentypen (\*erforderlich):** [bucket](#list_s3-resource-bucket) / **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:AccessGrantsInstanceArn](#list_s3-s3_AccessGrantsInstanceArn)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:delimiter](#list_s3-s3_delimiter)
[s3:max-keys](#list_s3-s3_max-keys)
[s3:prefix](#list_s3-s3_prefix)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** List
- ** [ListBucketMultipartUploads](https://docs.aws.amazon.com/AmazonS3/latest/API/API_ListMultipartUploads.html) **
- **Description:** Gewährt die Berechtigung zum Auflisten in Bearbeitung befindlicher mehrteilige Uploads
- **Ressourcentypen (\*erforderlich):** [bucket\*](#list_s3-resource-bucket)
- **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:AccessGrantsInstanceArn](#list_s3-s3_AccessGrantsInstanceArn)
[s3:AccessPointNetworkOrigin](#list_s3-s3_AccessPointNetworkOrigin)
[s3:AccessPointTag/${TagKey}](#list_s3-s3_AccessPointTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:DataAccessPointAccount](#list_s3-s3_DataAccessPointAccount)
[s3:DataAccessPointArn](#list_s3-s3_DataAccessPointArn)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** List
- ** [ListBucketVersions](https://docs.aws.amazon.com/AmazonS3/latest/API/API_ListObjectVersions.html) **
- **Description:** Erteilt die Berechtigung zum Auflisten von Metadaten zu allen Versionen von Objekten in einem Amazon-S3-Bucket
- **Ressourcentypen (\*erforderlich):** [accesspoint](#list_s3-resource-accesspoint) / **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:AccessGrantsInstanceArn](#list_s3-s3_AccessGrantsInstanceArn)
[s3:AccessPointNetworkOrigin](#list_s3-s3_AccessPointNetworkOrigin)
[s3:AccessPointTag/${TagKey}](#list_s3-s3_AccessPointTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:DataAccessPointAccount](#list_s3-s3_DataAccessPointAccount)
[s3:DataAccessPointArn](#list_s3-s3_DataAccessPointArn)
[s3:delimiter](#list_s3-s3_delimiter)
[s3:max-keys](#list_s3-s3_max-keys)
[s3:prefix](#list_s3-s3_prefix)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Ressourcentypen (\*erforderlich):** [bucket](#list_s3-resource-bucket) / **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:AccessGrantsInstanceArn](#list_s3-s3_AccessGrantsInstanceArn)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:delimiter](#list_s3-s3_delimiter)
[s3:max-keys](#list_s3-s3_max-keys)
[s3:prefix](#list_s3-s3_prefix)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Auflisten
- ** [ListCallerAccessGrants](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_ListCallerAccessGrants.html) **
- **Description:** Erteilt die Erlaubnis, den Access Grant des Anrufers aufzulisten
- **Ressourcentypen (\*erforderlich):** [accessgrantsinstance\*](#list_s3-resource-accessgrantsinstance)
- **Bedingungsschlüssel:** [aws:RequestTag/${TagKey}](#list_s3-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_s3-aws_TagKeys)
[s3:authType](#list_s3-s3_authType)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Auflisten
- ** [ListJobs](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_ListJobs.html) **
- **Description:** Gewährt die Berechtigung zum Auflisten aktueller und kürzlich beendeter Aufgaben
- **Ressourcentypen (\*erforderlich):**
- **Bedingungsschlüssel:** [s3:authType](#list_s3-s3_authType)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Auflisten
- ** [ListMultiRegionAccessPoints](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_ListMultiRegionAccessPoints.html) **
- **Description:** Erteilt die Erlaubnis zum Auflisten Multi-Region Zugangspunkte
- **Ressourcentypen (\*erforderlich):**
- **Bedingungsschlüssel:** [s3:authType](#list_s3-s3_authType)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
- **Zugriffsebene:** Auflisten
- ** [ListMultipartUploadParts](https://docs.aws.amazon.com/AmazonS3/latest/API/API_ListParts.html) **
- **Description:** Gewährt die Berechtigung zum Auflisten der Teile, die für einen bestimmten mehrteiligen Upload hochgeladen wurden
- **Ressourcentypen (\*erforderlich):** [accesspointobject](#list_s3-resource-accesspointobject) / **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:AccessGrantsInstanceArn](#list_s3-s3_AccessGrantsInstanceArn)
[s3:AccessPointNetworkOrigin](#list_s3-s3_AccessPointNetworkOrigin)
[s3:AccessPointTag/${TagKey}](#list_s3-s3_AccessPointTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:DataAccessPointAccount](#list_s3-s3_DataAccessPointAccount)
[s3:DataAccessPointArn](#list_s3-s3_DataAccessPointArn)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Ressourcentypen (\*erforderlich):** [object](#list_s3-resource-object) / **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:AccessGrantsInstanceArn](#list_s3-s3_AccessGrantsInstanceArn)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Auflisten
- ** [ListObjectAnnotations](https://docs.aws.amazon.com/AmazonS3/latest/API/API_ListObjectAnnotations.html) **
- **Description:** Erteilt die Erlaubnis, Anmerkungen zu einem Objekt aufzulisten
- **Ressourcentypen (\*erforderlich):** [accesspointobject](#list_s3-resource-accesspointobject) / **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:AccessPointNetworkOrigin](#list_s3-s3_AccessPointNetworkOrigin)
[s3:AccessPointTag/${TagKey}](#list_s3-s3_AccessPointTag___TagKey_)
[s3:annotation-prefix](#list_s3-s3_annotation-prefix)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:DataAccessPointAccount](#list_s3-s3_DataAccessPointAccount)
[s3:DataAccessPointArn](#list_s3-s3_DataAccessPointArn)
[s3:ExistingObjectTag/](#list_s3-s3_ExistingObjectTag_key)
[s3:max-annotation-results](#list_s3-s3_max-annotation-results)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Ressourcentypen (\*erforderlich):** [object](#list_s3-resource-object) / **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:annotation-prefix](#list_s3-s3_annotation-prefix)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:ExistingObjectTag/](#list_s3-s3_ExistingObjectTag_key)
[s3:max-annotation-results](#list_s3-s3_max-annotation-results)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Auflisten
- ** [ListObjectVersionAnnotations](https://docs.aws.amazon.com/AmazonS3/latest/API/API_ListObjectAnnotations.html) **
- **Description:** Erteilt die Erlaubnis, Anmerkungen zu einer bestimmten Version eines Objekts aufzulisten
- **Ressourcentypen (\*erforderlich):** [accesspointobject](#list_s3-resource-accesspointobject) / **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:AccessPointNetworkOrigin](#list_s3-s3_AccessPointNetworkOrigin)
[s3:AccessPointTag/${TagKey}](#list_s3-s3_AccessPointTag___TagKey_)
[s3:annotation-prefix](#list_s3-s3_annotation-prefix)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:DataAccessPointAccount](#list_s3-s3_DataAccessPointAccount)
[s3:DataAccessPointArn](#list_s3-s3_DataAccessPointArn)
[s3:ExistingObjectTag/](#list_s3-s3_ExistingObjectTag_key)
[s3:max-annotation-results](#list_s3-s3_max-annotation-results)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:versionid](#list_s3-s3_versionid)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Ressourcentypen (\*erforderlich):** [object](#list_s3-resource-object) / **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:annotation-prefix](#list_s3-s3_annotation-prefix)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:ExistingObjectTag/](#list_s3-s3_ExistingObjectTag_key)
[s3:max-annotation-results](#list_s3-s3_max-annotation-results)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:versionid](#list_s3-s3_versionid)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Auflisten
- ** [ListStorageLensConfigurations](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_ListStorageLensConfigurations.html) **
- **Description:** Erteilt die Berechtigung zum Auflisten von Amazon-S3-Storage-Lens-Konfigurationen
- **Ressourcentypen (\*erforderlich):**
- **Bedingungsschlüssel:** [s3:authType](#list_s3-s3_authType)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Auflisten
- ** [ListStorageLensGroups](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_ListStorageLensGroups.html) **
- **Description:** Gewährt die Berechtigung zum Auflisten von S3-Storage-Lens-Gruppen
- **Ressourcentypen (\*erforderlich):**
- **Bedingungsschlüssel:** [s3:authType](#list_s3-s3_authType)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Auflisten
- ** [ListTagsForResource](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_ListTagsForResource.html) **
- **Description:** Gewährt die Berechtigung zum Auflisten der Tags, die einer bestimmten Ressource angefügt sind
- **Ressourcentypen (\*erforderlich):** [accessgrant](#list_s3-resource-accessgrant) / **Bedingungsschlüssel:** [aws:RequestTag/${TagKey}](#list_s3-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_s3-aws_TagKeys)
[s3:authType](#list_s3-s3_authType)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Ressourcentypen (\*erforderlich):** [accessgrantsinstance](#list_s3-resource-accessgrantsinstance) / **Bedingungsschlüssel:** [aws:RequestTag/${TagKey}](#list_s3-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_s3-aws_TagKeys)
[s3:authType](#list_s3-s3_authType)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Ressourcentypen (\*erforderlich):** [accessgrantslocation](#list_s3-resource-accessgrantslocation) / **Bedingungsschlüssel:** [aws:RequestTag/${TagKey}](#list_s3-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_s3-aws_TagKeys)
[s3:authType](#list_s3-s3_authType)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Ressourcentypen (\*erforderlich):** [accesspoint](#list_s3-resource-accesspoint) / **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:AccessPointNetworkOrigin](#list_s3-s3_AccessPointNetworkOrigin)
[s3:AccessPointTag/${TagKey}](#list_s3-s3_AccessPointTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:DataAccessPointAccount](#list_s3-s3_DataAccessPointAccount)
[s3:DataAccessPointArn](#list_s3-s3_DataAccessPointArn)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Ressourcentypen (\*erforderlich):** [bucket](#list_s3-resource-bucket) / **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Ressourcentypen (\*erforderlich):** [storagelensgroup](#list_s3-resource-storagelensgroup) / **Bedingungsschlüssel:** [aws:RequestTag/${TagKey}](#list_s3-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_s3-aws_TagKeys)
[s3:authType](#list_s3-s3_authType)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Auflisten
- ** [ObjectOwnerOverrideToBucketOwner](https://docs.aws.amazon.com/AmazonS3/latest/userguide/replication-change-owner.html#repl-ownership-add-role-permission) **
- **Description:** Gewährt die Berechtigung zum Ändern der Replikat-Eigentümerschaft
- **Ressourcentypen (\*erforderlich):** [object\*](#list_s3-resource-object)
- **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Verwaltung von Berechtigungen, Schreiben
- ** [PutAccelerateConfiguration](https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutBucketAccelerateConfiguration.html) **
- **Description:** Gewährt die Berechtigung zum Verwenden der Accelerate-Unterquelle zum Festlegen des Transfer Acceleration-Status eines vorhandenen S3-Buckets
- **Ressourcentypen (\*erforderlich):** [bucket\*](#list_s3-resource-bucket)
- **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Schreiben
- ** [PutAccessGrantsInstanceResourcePolicy](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_PutAccessGrantsInstanceResourcePolicy.html) **
- **Description:** Gewährt die Berechtigung zum Setzen einer Access Grants-Instance Ressourcenrichtlinie
- **Ressourcentypen (\*erforderlich):** [accessgrantsinstance\*](#list_s3-resource-accessgrantsinstance)
- **Bedingungsschlüssel:** [aws:RequestTag/${TagKey}](#list_s3-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_s3-aws_TagKeys)
[s3:authType](#list_s3-s3_authType)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Verwaltung von Berechtigungen, Schreiben
- ** [PutAccessPointConfigurationForObjectLambda](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_PutAccessPointConfigurationForObjectLambda.html) **
- **Description:** Gewährt die Berechtigung zum Festlegen der Konfiguration des Objekt-Lambda-fähigen Zugriffspunkts
- **Ressourcentypen (\*erforderlich):** [objectlambdaaccesspoint\*](#list_s3-resource-objectlambdaaccesspoint)
- **Bedingungsschlüssel:** [s3:AccessPointNetworkOrigin](#list_s3-s3_AccessPointNetworkOrigin)
[s3:authType](#list_s3-s3_authType)
[s3:DataAccessPointAccount](#list_s3-s3_DataAccessPointAccount)
[s3:DataAccessPointArn](#list_s3-s3_DataAccessPointArn)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Write
- ** [PutAccessPointPolicy](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_PutAccessPointPolicy.html) **
- **Description:** Gewährt die Berechtigung zum Zuordnen einer Zugriffsrichtlinie zu einem angegebenen Zugriffspunkt
- **Ressourcentypen (\*erforderlich):** [accesspoint\*](#list_s3-resource-accesspoint)
- **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:AccessPointNetworkOrigin](#list_s3-s3_AccessPointNetworkOrigin)
[s3:AccessPointTag/${TagKey}](#list_s3-s3_AccessPointTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:DataAccessPointAccount](#list_s3-s3_DataAccessPointAccount)
[s3:DataAccessPointArn](#list_s3-s3_DataAccessPointArn)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Verwaltung von Berechtigungen, Schreiben
- ** [PutAccessPointPolicyForObjectLambda](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_PutAccessPointPolicyForObjectLambda.html) **
- **Description:** Gewährt die Berechtigung zum Zuordnen einer Zugriffsrichtlinie zu einem angegebenen Objekt-Lambda-fähigen Zugriffspunkt
- **Ressourcentypen (\*erforderlich):** [objectlambdaaccesspoint\*](#list_s3-resource-objectlambdaaccesspoint)
- **Bedingungsschlüssel:** [s3:AccessPointNetworkOrigin](#list_s3-s3_AccessPointNetworkOrigin)
[s3:authType](#list_s3-s3_authType)
[s3:DataAccessPointAccount](#list_s3-s3_DataAccessPointAccount)
[s3:DataAccessPointArn](#list_s3-s3_DataAccessPointArn)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Verwaltung von Berechtigungen, Schreiben
- ** [PutAccessPointPublicAccessBlock](https://docs.aws.amazon.com/AmazonS3/latest/userguide/access-control-block-public-access.html#access-control-block-public-access-examples-access-point) **
- **Description:** Gewährt die Berechtigung zum Zuordnen von Blockkonfigurationen für den öffentlichen Zugriff zu einem angegebenen Zugriffspunkt, während ein Zugriffspunkt erstellt wird
- **Ressourcentypen (\*erforderlich):**
- **Bedingungsschlüssel:**
- **Zugriffsebene:** Verwaltung von Berechtigungen, Schreiben
- ** [PutAccountPublicAccessBlock](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_PutPublicAccessBlock.html) **
- **Description:** Erteilt die Erlaubnis, das zu erstellen oder zu ändern PublicAccessBlock Konfiguration für eine AWS-Konto
- **Ressourcentypen (\*erforderlich):**
- **Bedingungsschlüssel:** [s3:authType](#list_s3-s3_authType)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Verwaltung von Berechtigungen, Schreiben
- ** [PutAnalyticsConfiguration](https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutBucketAnalyticsConfiguration.html) **
- **Description:** Gewährt die Berechtigung zum Festlegen einer Analytics-Konfiguration für den Bucket, angegeben durch die Analytics-Konfigurations-ID
- **Ressourcentypen (\*erforderlich):** [bucket\*](#list_s3-resource-bucket)
- **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Schreiben
- ** [PutBucketAbac](https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutBucketAbac.html) **
- **Description:** Erteilt die Erlaubnis, die ABAC-Konfiguration für einen Allzweck-Bucket festzulegen
- **Ressourcentypen (\*erforderlich):** [bucket\*](#list_s3-resource-bucket)
- **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Schreiben
- ** [PutBucketAcl](https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutBucketAcl.html) **
- **Description:** Gewährt die Berechtigung zum Einrichten von Berechtigungen auf einem bestehenden Bucket mithilfe von Zugriffskontrolllisten (ACLs)
- **Ressourcentypen (\*erforderlich):** [bucket\*](#list_s3-resource-bucket)
- **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-acl](#list_s3-s3_x-amz-acl)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
[s3:x-amz-grant-full-control](#list_s3-s3_x-amz-grant-full-control)
[s3:x-amz-grant-read](#list_s3-s3_x-amz-grant-read)
[s3:x-amz-grant-read-acp](#list_s3-s3_x-amz-grant-read-acp)
[s3:x-amz-grant-write](#list_s3-s3_x-amz-grant-write)
[s3:x-amz-grant-write-acp](#list_s3-s3_x-amz-grant-write-acp)
- **Zugriffsebene:** Verwaltung von Berechtigungen, Schreiben
- ** [PutBucketCORS](https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutBucketCors.html) **
- **Description:** Erteilt die Berechtigung zum Festlegen der CORS-Konfiguration für einen Amazon-S3-Bucket
- **Ressourcentypen (\*erforderlich):** [bucket\*](#list_s3-resource-bucket)
- **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Write
- ** [PutBucketLogging](https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutBucketLogging.html) **
- **Description:** Erteilt die Berechtigung zum Festlegen der Protokollierungsparameter für einen Amazon-S3-Bucket
- **Ressourcentypen (\*erforderlich):** [bucket\*](#list_s3-resource-bucket)
- **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Write
- ** [PutBucketNotification](https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutBucketNotification.html) **
- **Description:** Erteilt die Berechtigung zum Erhalt von Benachrichtigungen, wenn bestimmte Ereignisse in einem Amazon-S3-Bucket eintreten
- **Ressourcentypen (\*erforderlich):** [bucket\*](#list_s3-resource-bucket)
- **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Write
- ** [PutBucketObjectLockConfiguration](https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutObjectLockConfiguration.html) **
- **Description:** Gewährt die Berechtigung zum Setzen der Object Lock-Konfiguration auf einem bestimmten Bucket
- **Ressourcentypen (\*erforderlich):** [bucket\*](#list_s3-resource-bucket)
- **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
- **Zugriffsebene:** Schreiben
- ** [PutBucketOwnershipControls](https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutBucketOwnershipControls.html) **
- **Description:** Gewährt die Berechtigung zum Hinzufügen, Ersetzen oder Löschen von Kontrollen zur Eigentümerschaft in einem Bucket
- **Ressourcentypen (\*erforderlich):** [bucket\*](#list_s3-resource-bucket)
- **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Verwaltung von Berechtigungen, Schreiben
- ** [PutBucketPolicy](https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutBucketPolicy.html) **
- **Description:** Gewährt die Berechtigung zum Hinzufügen oder Ersetzen einer Bucket-Richtlinie für einen Bucket
- **Ressourcentypen (\*erforderlich):** [bucket\*](#list_s3-resource-bucket)
- **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Verwaltung von Berechtigungen, Schreiben
- ** [PutBucketPublicAccessBlock](https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutPublicAccessBlock.html) **
- **Description:** Erteilt die Erlaubnis, das zu erstellen oder zu ändern PublicAccessBlock Konfiguration für einen bestimmten Amazon S3-Bucket
- **Ressourcentypen (\*erforderlich):** [bucket\*](#list_s3-resource-bucket)
- **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Verwaltung von Berechtigungen, Schreiben
- ** [PutBucketRequestPayment](https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutBucketRequestPayment.html) **
- **Description:** Gewährt die Berechtigung zum Festlegen der Anforderungszahlungskonfiguration eines Buckets
- **Ressourcentypen (\*erforderlich):** [bucket\*](#list_s3-resource-bucket)
- **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Write
- ** [PutBucketTagging](https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutBucketTagging.html) **
- **Description:** Erteilt die Berechtigung zum Hinzufügen eines Satzes von Markierungen zu einem vorhandenen Amazon-S3-Bucket
- **Ressourcentypen (\*erforderlich):** [bucket\*](#list_s3-resource-bucket)
- **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Taggen, Schreiben
- ** [PutBucketVersioning](https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutBucketVersioning.html) **
- **Description:** Erteilt die Berechtigung zum Festlegen des Versionssteuerungsstatus eines vorhandenen Amazon-S3-Buckets
- **Ressourcentypen (\*erforderlich):** [bucket\*](#list_s3-resource-bucket)
- **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Write
- ** [PutBucketWebsite](https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutBucketWebsite.html) **
- **Description:** Gewährt die Berechtigung zum Festlegen der Konfiguration der Website, die in der Website-Unterressource angegeben ist
- **Ressourcentypen (\*erforderlich):** [bucket\*](#list_s3-resource-bucket)
- **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Write
- ** [PutEncryptionConfiguration](https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutBucketEncryption.html) **
- **Description:** Erteilt die Berechtigung zum Festlegen der Verschlüsselungskonfiguration für einen Amazon-S3-Bucket
- **Ressourcentypen (\*erforderlich):** [bucket\*](#list_s3-resource-bucket)
- **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Write
- ** [PutIntelligentTieringConfiguration](https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutBucketIntelligentTieringConfiguration.html) **
- **Description:** Gewährt die Berechtigung, eine Amazon S3 Intelligent Tiering-Konfiguration zu erstellen, zu aktualisieren oder zu löschen
- **Ressourcentypen (\*erforderlich):** [bucket\*](#list_s3-resource-bucket)
- **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Write
- ** [PutInventoryConfiguration](https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutBucketInventoryConfiguration.html) **
- **Description:** Gewährt die Berechtigung zum Hinzufügen einer Inventarkonfiguration zu dem Bucket, identifiziert durch die Inventar-ID
- **Ressourcentypen (\*erforderlich):** [bucket\*](#list_s3-resource-bucket)
- **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:InventoryAccessibleOptionalFields](#list_s3-s3_InventoryAccessibleOptionalFields)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Write
- ** [PutJobTagging](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_PutJobTagging.html) **
- **Description:** Erteilt die Berechtigung zum Ersetzen von Markierungen für eine vorhandene Aufgabe in Amazon S3 Batch Operations
- **Ressourcentypen (\*erforderlich):** [job\*](#list_s3-resource-job)
- **Bedingungsschlüssel:** [aws:RequestTag/${TagKey}](#list_s3-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_s3-aws_TagKeys)
[s3:authType](#list_s3-s3_authType)
[s3:ExistingJobOperation](#list_s3-s3_ExistingJobOperation)
[s3:ExistingJobPriority](#list_s3-s3_ExistingJobPriority)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Taggen, Schreiben
- ** [PutLifecycleConfiguration](https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutBucketLifecycleConfiguration.html) **
- **Description:** Gewährt die Berechtigung zum Erstellen einer neuen Lebenszyklus-Konfiguration für den Bucket oder zum Ersetzen einer vorhandenen Lebenszyklus-Konfiguration
- **Ressourcentypen (\*erforderlich):** [bucket\*](#list_s3-resource-bucket)
- **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Schreiben
- ** [PutMetricsConfiguration](https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutBucketMetricsConfiguration.html) **
- **Description:** Erteilt die Erlaubnis, eine Metrikkonfiguration für das festzulegen oder zu aktualisieren CloudWatch Metriken aus einem Amazon S3-Bucket anfordern
- **Ressourcentypen (\*erforderlich):** [bucket\*](#list_s3-resource-bucket)
- **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Schreiben
- ** [PutMultiRegionAccessPointPolicy](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_PutMultiRegionAccessPointPolicy.html) **
- **Description:** Erteilt die Erlaubnis, eine Zugriffsrichtlinie einer angegebenen Richtlinie zuzuordnen Multi-Region Zugangspunkt
- **Ressourcentypen (\*erforderlich):** [multiregionaccesspoint\*](#list_s3-resource-multiregionaccesspoint)
- **Bedingungsschlüssel:** [s3:AccessPointNetworkOrigin](#list_s3-s3_AccessPointNetworkOrigin)
[s3:authType](#list_s3-s3_authType)
[s3:DataAccessPointAccount](#list_s3-s3_DataAccessPointAccount)
[s3:DataAccessPointArn](#list_s3-s3_DataAccessPointArn)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
- **Zugriffsebene:** Verwaltung von Berechtigungen, Schreiben
- ** [PutObject](https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutObject.html) **
- **Description:** Gewährt die Berechtigung zum Hinzufügen eines Objekts zu einem Bucket
- **Ressourcentypen (\*erforderlich):** [accesspointobject](#list_s3-resource-accesspointobject) / **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:AccessGrantsInstanceArn](#list_s3-s3_AccessGrantsInstanceArn)
[s3:AccessPointNetworkOrigin](#list_s3-s3_AccessPointNetworkOrigin)
[s3:AccessPointTag/${TagKey}](#list_s3-s3_AccessPointTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:DataAccessPointAccount](#list_s3-s3_DataAccessPointAccount)
[s3:DataAccessPointArn](#list_s3-s3_DataAccessPointArn)
[s3:if-match](#list_s3-s3_if-match)
[s3:if-none-match](#list_s3-s3_if-none-match)
[s3:object-lock-event-hold](#list_s3-s3_object-lock-event-hold)
[s3:object-lock-event-hold-duration-days](#list_s3-s3_object-lock-event-hold-duration-days)
[s3:object-lock-legal-hold](#list_s3-s3_object-lock-legal-hold)
[s3:object-lock-mode](#list_s3-s3_object-lock-mode)
[s3:object-lock-remaining-retention-days](#list_s3-s3_object-lock-remaining-retention-days)
[s3:object-lock-retain-until-date](#list_s3-s3_object-lock-retain-until-date)
[s3:ObjectCreationOperation](#list_s3-s3_ObjectCreationOperation)
[s3:RequestObjectTag/](#list_s3-s3_RequestObjectTag_key)
[s3:RequestObjectTagKeys](#list_s3-s3_RequestObjectTagKeys)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-acl](#list_s3-s3_x-amz-acl)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
[s3:x-amz-copy-source](#list_s3-s3_x-amz-copy-source)
[s3:x-amz-grant-full-control](#list_s3-s3_x-amz-grant-full-control)
[s3:x-amz-grant-read](#list_s3-s3_x-amz-grant-read)
[s3:x-amz-grant-read-acp](#list_s3-s3_x-amz-grant-read-acp)
[s3:x-amz-grant-write](#list_s3-s3_x-amz-grant-write)
[s3:x-amz-grant-write-acp](#list_s3-s3_x-amz-grant-write-acp)
[s3:x-amz-metadata-directive](#list_s3-s3_x-amz-metadata-directive)
[s3:x-amz-object-annotation-directive](#list_s3-s3_x-amz-object-annotation-directive)
[s3:x-amz-server-side-encryption](#list_s3-s3_x-amz-server-side-encryption)
[s3:x-amz-server-side-encryption-aws-kms-key-id](#list_s3-s3_x-amz-server-side-encryption-aws-kms-key-id)
[s3:x-amz-server-side-encryption-customer-algorithm](#list_s3-s3_x-amz-server-side-encryption-customer-algorithm)
[s3:x-amz-storage-class](#list_s3-s3_x-amz-storage-class)
[s3:x-amz-website-redirect-location](#list_s3-s3_x-amz-website-redirect-location)
- **Ressourcentypen (\*erforderlich):** [object](#list_s3-resource-object) / **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:AccessGrantsInstanceArn](#list_s3-s3_AccessGrantsInstanceArn)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:if-match](#list_s3-s3_if-match)
[s3:if-none-match](#list_s3-s3_if-none-match)
[s3:object-lock-event-hold](#list_s3-s3_object-lock-event-hold)
[s3:object-lock-event-hold-duration-days](#list_s3-s3_object-lock-event-hold-duration-days)
[s3:object-lock-legal-hold](#list_s3-s3_object-lock-legal-hold)
[s3:object-lock-mode](#list_s3-s3_object-lock-mode)
[s3:object-lock-remaining-retention-days](#list_s3-s3_object-lock-remaining-retention-days)
[s3:object-lock-retain-until-date](#list_s3-s3_object-lock-retain-until-date)
[s3:ObjectCreationOperation](#list_s3-s3_ObjectCreationOperation)
[s3:RequestObjectTag/](#list_s3-s3_RequestObjectTag_key)
[s3:RequestObjectTagKeys](#list_s3-s3_RequestObjectTagKeys)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-acl](#list_s3-s3_x-amz-acl)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
[s3:x-amz-copy-source](#list_s3-s3_x-amz-copy-source)
[s3:x-amz-grant-full-control](#list_s3-s3_x-amz-grant-full-control)
[s3:x-amz-grant-read](#list_s3-s3_x-amz-grant-read)
[s3:x-amz-grant-read-acp](#list_s3-s3_x-amz-grant-read-acp)
[s3:x-amz-grant-write](#list_s3-s3_x-amz-grant-write)
[s3:x-amz-grant-write-acp](#list_s3-s3_x-amz-grant-write-acp)
[s3:x-amz-metadata-directive](#list_s3-s3_x-amz-metadata-directive)
[s3:x-amz-object-annotation-directive](#list_s3-s3_x-amz-object-annotation-directive)
[s3:x-amz-server-side-encryption](#list_s3-s3_x-amz-server-side-encryption)
[s3:x-amz-server-side-encryption-aws-kms-key-id](#list_s3-s3_x-amz-server-side-encryption-aws-kms-key-id)
[s3:x-amz-server-side-encryption-customer-algorithm](#list_s3-s3_x-amz-server-side-encryption-customer-algorithm)
[s3:x-amz-storage-class](#list_s3-s3_x-amz-storage-class)
[s3:x-amz-website-redirect-location](#list_s3-s3_x-amz-website-redirect-location)
- **Zugriffsebene:** Schreiben
- ** [PutObjectAcl](https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutObjectAcl.html) **
- **Description:** Gewährt die Berechtigung zum Festlegen der Berechtigungen für Zugriffskontrolllisten (Access Control Lists, ACL) für neue oder vorhandene Objekte in einem S3 Bucket
- **Ressourcentypen (\*erforderlich):** [accesspointobject](#list_s3-resource-accesspointobject) / **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:AccessGrantsInstanceArn](#list_s3-s3_AccessGrantsInstanceArn)
[s3:AccessPointNetworkOrigin](#list_s3-s3_AccessPointNetworkOrigin)
[s3:AccessPointTag/${TagKey}](#list_s3-s3_AccessPointTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:DataAccessPointAccount](#list_s3-s3_DataAccessPointAccount)
[s3:DataAccessPointArn](#list_s3-s3_DataAccessPointArn)
[s3:ExistingObjectTag/](#list_s3-s3_ExistingObjectTag_key)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-acl](#list_s3-s3_x-amz-acl)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
[s3:x-amz-grant-full-control](#list_s3-s3_x-amz-grant-full-control)
[s3:x-amz-grant-read](#list_s3-s3_x-amz-grant-read)
[s3:x-amz-grant-read-acp](#list_s3-s3_x-amz-grant-read-acp)
[s3:x-amz-grant-write](#list_s3-s3_x-amz-grant-write)
[s3:x-amz-grant-write-acp](#list_s3-s3_x-amz-grant-write-acp)
[s3:x-amz-storage-class](#list_s3-s3_x-amz-storage-class)
- **Ressourcentypen (\*erforderlich):** [object](#list_s3-resource-object) / **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:AccessGrantsInstanceArn](#list_s3-s3_AccessGrantsInstanceArn)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:ExistingObjectTag/](#list_s3-s3_ExistingObjectTag_key)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-acl](#list_s3-s3_x-amz-acl)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
[s3:x-amz-grant-full-control](#list_s3-s3_x-amz-grant-full-control)
[s3:x-amz-grant-read](#list_s3-s3_x-amz-grant-read)
[s3:x-amz-grant-read-acp](#list_s3-s3_x-amz-grant-read-acp)
[s3:x-amz-grant-write](#list_s3-s3_x-amz-grant-write)
[s3:x-amz-grant-write-acp](#list_s3-s3_x-amz-grant-write-acp)
[s3:x-amz-storage-class](#list_s3-s3_x-amz-storage-class)
- **Zugriffsebene:** Verwaltung von Berechtigungen, Schreiben
- ** [PutObjectAnnotation](https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutObjectAnnotation.html) **
- **Description:** Erteilt die Erlaubnis, eine Anmerkung zu einem Objekt hinzuzufügen oder zu ersetzen
- **Ressourcentypen (\*erforderlich):** [accesspointobject](#list_s3-resource-accesspointobject) / **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:AccessPointNetworkOrigin](#list_s3-s3_AccessPointNetworkOrigin)
[s3:AccessPointTag/${TagKey}](#list_s3-s3_AccessPointTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:DataAccessPointAccount](#list_s3-s3_DataAccessPointAccount)
[s3:DataAccessPointArn](#list_s3-s3_DataAccessPointArn)
[s3:ExistingObjectTag/](#list_s3-s3_ExistingObjectTag_key)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
[s3:x-amz-object-if-match](#list_s3-s3_x-amz-object-if-match)
- **Ressourcentypen (\*erforderlich):** [object](#list_s3-resource-object) / **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:ExistingObjectTag/](#list_s3-s3_ExistingObjectTag_key)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
[s3:x-amz-object-if-match](#list_s3-s3_x-amz-object-if-match)
- **Zugriffsebene:** Schreiben
- ** [PutObjectLegalHold](https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutObjectLegalHold.html) **
- **Description:** Gewährt die Berechtigung zum Anwenden einer Legal Hold Konfiguration auf das angegebene Objekt
- **Ressourcentypen (\*erforderlich):** [accesspointobject](#list_s3-resource-accesspointobject) / **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:AccessPointNetworkOrigin](#list_s3-s3_AccessPointNetworkOrigin)
[s3:AccessPointTag/${TagKey}](#list_s3-s3_AccessPointTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:DataAccessPointAccount](#list_s3-s3_DataAccessPointAccount)
[s3:DataAccessPointArn](#list_s3-s3_DataAccessPointArn)
[s3:object-lock-legal-hold](#list_s3-s3_object-lock-legal-hold)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Ressourcentypen (\*erforderlich):** [object](#list_s3-resource-object) / **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:object-lock-legal-hold](#list_s3-s3_object-lock-legal-hold)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Write
- ** [PutObjectRetention](https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutObjectRetention.html) **
- **Description:** Gewährt die Berechtigung zum Platzieren einer Objektaufbewahrungskonfiguration auf einem Objekt
- **Ressourcentypen (\*erforderlich):** [accesspointobject](#list_s3-resource-accesspointobject) / **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:AccessPointNetworkOrigin](#list_s3-s3_AccessPointNetworkOrigin)
[s3:AccessPointTag/${TagKey}](#list_s3-s3_AccessPointTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:DataAccessPointAccount](#list_s3-s3_DataAccessPointAccount)
[s3:DataAccessPointArn](#list_s3-s3_DataAccessPointArn)
[s3:object-lock-event-hold](#list_s3-s3_object-lock-event-hold)
[s3:object-lock-event-hold-duration-days](#list_s3-s3_object-lock-event-hold-duration-days)
[s3:object-lock-mode](#list_s3-s3_object-lock-mode)
[s3:object-lock-remaining-retention-days](#list_s3-s3_object-lock-remaining-retention-days)
[s3:object-lock-retain-until-date](#list_s3-s3_object-lock-retain-until-date)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Ressourcentypen (\*erforderlich):** [object](#list_s3-resource-object) / **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:object-lock-event-hold](#list_s3-s3_object-lock-event-hold)
[s3:object-lock-event-hold-duration-days](#list_s3-s3_object-lock-event-hold-duration-days)
[s3:object-lock-mode](#list_s3-s3_object-lock-mode)
[s3:object-lock-remaining-retention-days](#list_s3-s3_object-lock-remaining-retention-days)
[s3:object-lock-retain-until-date](#list_s3-s3_object-lock-retain-until-date)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Write
- ** [PutObjectTagging](https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutObjectTagging.html) **
- **Description:** Erteilt die Berechtigung zum Festlegen des bereitgestellten Tag-Satzes für ein Objekt, das bereits in einem Bucket vorhanden ist
- **Ressourcentypen (\*erforderlich):** [accesspointobject](#list_s3-resource-accesspointobject) / **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:AccessPointNetworkOrigin](#list_s3-s3_AccessPointNetworkOrigin)
[s3:AccessPointTag/${TagKey}](#list_s3-s3_AccessPointTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:DataAccessPointAccount](#list_s3-s3_DataAccessPointAccount)
[s3:DataAccessPointArn](#list_s3-s3_DataAccessPointArn)
[s3:ExistingObjectTag/](#list_s3-s3_ExistingObjectTag_key)
[s3:RequestObjectTag/](#list_s3-s3_RequestObjectTag_key)
[s3:RequestObjectTagKeys](#list_s3-s3_RequestObjectTagKeys)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Ressourcentypen (\*erforderlich):** [object](#list_s3-resource-object) / **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:ExistingObjectTag/](#list_s3-s3_ExistingObjectTag_key)
[s3:RequestObjectTag/](#list_s3-s3_RequestObjectTag_key)
[s3:RequestObjectTagKeys](#list_s3-s3_RequestObjectTagKeys)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Taggen, Schreiben
- ** [PutObjectVersionAcl](https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutObjectAcl.html) **
- **Description:** Erteilt die Berechtigung zum Verwenden der ACL (Access Control List)-Unterquelle zum Festlegen der Access-Control-List-Berechtigungen für ein Objekt, das bereits in einem Bucket vorhanden ist
- **Ressourcentypen (\*erforderlich):** [accesspointobject](#list_s3-resource-accesspointobject) / **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:AccessGrantsInstanceArn](#list_s3-s3_AccessGrantsInstanceArn)
[s3:AccessPointNetworkOrigin](#list_s3-s3_AccessPointNetworkOrigin)
[s3:AccessPointTag/${TagKey}](#list_s3-s3_AccessPointTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:DataAccessPointAccount](#list_s3-s3_DataAccessPointAccount)
[s3:DataAccessPointArn](#list_s3-s3_DataAccessPointArn)
[s3:ExistingObjectTag/](#list_s3-s3_ExistingObjectTag_key)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:versionid](#list_s3-s3_versionid)
[s3:x-amz-acl](#list_s3-s3_x-amz-acl)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
[s3:x-amz-grant-full-control](#list_s3-s3_x-amz-grant-full-control)
[s3:x-amz-grant-read](#list_s3-s3_x-amz-grant-read)
[s3:x-amz-grant-read-acp](#list_s3-s3_x-amz-grant-read-acp)
[s3:x-amz-grant-write](#list_s3-s3_x-amz-grant-write)
[s3:x-amz-grant-write-acp](#list_s3-s3_x-amz-grant-write-acp)
[s3:x-amz-storage-class](#list_s3-s3_x-amz-storage-class)
- **Ressourcentypen (\*erforderlich):** [object](#list_s3-resource-object) / **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:AccessGrantsInstanceArn](#list_s3-s3_AccessGrantsInstanceArn)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:ExistingObjectTag/](#list_s3-s3_ExistingObjectTag_key)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:versionid](#list_s3-s3_versionid)
[s3:x-amz-acl](#list_s3-s3_x-amz-acl)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
[s3:x-amz-grant-full-control](#list_s3-s3_x-amz-grant-full-control)
[s3:x-amz-grant-read](#list_s3-s3_x-amz-grant-read)
[s3:x-amz-grant-read-acp](#list_s3-s3_x-amz-grant-read-acp)
[s3:x-amz-grant-write](#list_s3-s3_x-amz-grant-write)
[s3:x-amz-grant-write-acp](#list_s3-s3_x-amz-grant-write-acp)
[s3:x-amz-storage-class](#list_s3-s3_x-amz-storage-class)
- **Zugriffsebene:** Verwaltung von Berechtigungen, Schreiben
- ** [PutObjectVersionAnnotation](https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutObjectAnnotation.html) **
- **Description:** Erteilt die Erlaubnis, eine Anmerkung zu einer bestimmten Version eines Objekts hinzuzufügen oder zu ersetzen
- **Ressourcentypen (\*erforderlich):** [accesspointobject](#list_s3-resource-accesspointobject) / **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:AccessPointNetworkOrigin](#list_s3-s3_AccessPointNetworkOrigin)
[s3:AccessPointTag/${TagKey}](#list_s3-s3_AccessPointTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:DataAccessPointAccount](#list_s3-s3_DataAccessPointAccount)
[s3:DataAccessPointArn](#list_s3-s3_DataAccessPointArn)
[s3:ExistingObjectTag/](#list_s3-s3_ExistingObjectTag_key)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:versionid](#list_s3-s3_versionid)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
[s3:x-amz-object-if-match](#list_s3-s3_x-amz-object-if-match)
- **Ressourcentypen (\*erforderlich):** [object](#list_s3-resource-object) / **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:ExistingObjectTag/](#list_s3-s3_ExistingObjectTag_key)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:versionid](#list_s3-s3_versionid)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
[s3:x-amz-object-if-match](#list_s3-s3_x-amz-object-if-match)
- **Zugriffsebene:** Schreiben
- ** [PutObjectVersionTagging](https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutObjectTagging.html) **
- **Description:** Erteilt die Berechtigung zum Festlegen des bereitgestellten Tag-Satzes für eine bestimmte Version eines Objekts
- **Ressourcentypen (\*erforderlich):** [accesspointobject](#list_s3-resource-accesspointobject) / **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:AccessPointNetworkOrigin](#list_s3-s3_AccessPointNetworkOrigin)
[s3:AccessPointTag/${TagKey}](#list_s3-s3_AccessPointTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:DataAccessPointAccount](#list_s3-s3_DataAccessPointAccount)
[s3:DataAccessPointArn](#list_s3-s3_DataAccessPointArn)
[s3:ExistingObjectTag/](#list_s3-s3_ExistingObjectTag_key)
[s3:RequestObjectTag/](#list_s3-s3_RequestObjectTag_key)
[s3:RequestObjectTagKeys](#list_s3-s3_RequestObjectTagKeys)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:versionid](#list_s3-s3_versionid)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Ressourcentypen (\*erforderlich):** [object](#list_s3-resource-object) / **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:ExistingObjectTag/](#list_s3-s3_ExistingObjectTag_key)
[s3:RequestObjectTag/](#list_s3-s3_RequestObjectTag_key)
[s3:RequestObjectTagKeys](#list_s3-s3_RequestObjectTagKeys)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:versionid](#list_s3-s3_versionid)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Taggen, Schreiben
- ** [PutReplicationConfiguration](https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutBucketReplication.html) **
- **Description:** Gewährt die Berechtigung zum Erstellen einer neuen Replikations-Konfiguration oder zum Ersetzen einer vorhandenen Replikations-Konfiguration
- **Ressourcentypen (\*erforderlich):** [bucket\*](#list_s3-resource-bucket)
- **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:isReplicationPauseRequest](#list_s3-s3_isReplicationPauseRequest)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Write
- ** [PutStorageLensConfiguration](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_PutStorageLensConfiguration.html) **
- **Description:** Erteilt die Berechtigung zum Erstellen oder Aktualisieren einer Amazon-S3-Storage-Lens-Konfiguration
- **Ressourcentypen (\*erforderlich):**
- **Bedingungsschlüssel:** [aws:RequestTag/${TagKey}](#list_s3-aws_RequestTag___TagKey_)
[aws:TagKeys](#list_s3-aws_TagKeys)
[s3:authType](#list_s3-s3_authType)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Write
- ** [PutStorageLensConfigurationTagging](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_PutStorageLensConfigurationTagging.html) **
- **Description:** Erteilt die Berechtigung zum Setzen oder Ersetzen von Markierungen auf eine vorhandene Amazon-S3-Storage-Lens-Konfiguration
- **Ressourcentypen (\*erforderlich):** [storagelensconfiguration\*](#list_s3-resource-storagelensconfiguration)
- **Bedingungsschlüssel:** [aws:RequestTag/${TagKey}](#list_s3-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_s3-aws_TagKeys)
[s3:authType](#list_s3-s3_authType)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Taggen, Schreiben
- ** [ReplicateDelete](https://docs.aws.amazon.com/AmazonS3/latest/userguide/setting-repl-config-perm-overview.html) **
- **Description:** Gewährt die Berechtigung zum Replizieren von Löschmarkierungen auf den Ziel-Bucket
- **Ressourcentypen (\*erforderlich):** [object\*](#list_s3-resource-object)
- **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Write
- ** [ReplicateObject](https://docs.aws.amazon.com/AmazonS3/latest/userguide/setting-repl-config-perm-overview.html) **
- **Description:** Gewährt die Berechtigung zum Replizieren von Objekten und Objekt-Markierungen auf den Ziel-Bucket
- **Ressourcentypen (\*erforderlich):** [object\*](#list_s3-resource-object)
- **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:object-lock-event-hold](#list_s3-s3_object-lock-event-hold)
[s3:object-lock-event-hold-duration-days](#list_s3-s3_object-lock-event-hold-duration-days)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
[s3:x-amz-server-side-encryption](#list_s3-s3_x-amz-server-side-encryption)
[s3:x-amz-server-side-encryption-aws-kms-key-id](#list_s3-s3_x-amz-server-side-encryption-aws-kms-key-id)
[s3:x-amz-server-side-encryption-customer-algorithm](#list_s3-s3_x-amz-server-side-encryption-customer-algorithm)
- **Zugriffsebene:** Schreiben
- ** [ReplicateObjectAnnotation](https://docs.aws.amazon.com/AmazonS3/latest/userguide/setting-repl-config-perm-overview.html) **
- **Description:** Erteilt die Erlaubnis, Anmerkungen in den Ziel-Bucket zu replizieren
- **Ressourcentypen (\*erforderlich):** [object\*](#list_s3-resource-object)
- **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Schreiben
- ** [ReplicateTags](https://docs.aws.amazon.com/AmazonS3/latest/userguide/setting-repl-config-perm-overview.html) **
- **Description:** Gewährt die Berechtigung zum Replizieren von Objekt-Markierungen auf den Ziel-Bucket
- **Ressourcentypen (\*erforderlich):** [object\*](#list_s3-resource-object)
- **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Taggen, Schreiben
- ** [RestoreObject](https://docs.aws.amazon.com/AmazonS3/latest/API/API_RestoreObject.html) **
- **Description:** Gewährt die Berechtigung zum Wiederherstellen einer archivierten Kopie eines Objekts in Amazon S3
- **Ressourcentypen (\*erforderlich):** [accesspointobject](#list_s3-resource-accesspointobject) / **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:AccessPointNetworkOrigin](#list_s3-s3_AccessPointNetworkOrigin)
[s3:AccessPointTag/${TagKey}](#list_s3-s3_AccessPointTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:DataAccessPointAccount](#list_s3-s3_DataAccessPointAccount)
[s3:DataAccessPointArn](#list_s3-s3_DataAccessPointArn)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Ressourcentypen (\*erforderlich):** [object](#list_s3-resource-object) / **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Schreiben
- ** [SubmitMultiRegionAccessPointRoutes](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_SubmitMultiRegionAccessPointRoutes.html) **
- **Description:** Erteilt die Erlaubnis, eine Aktualisierung der Routenkonfiguration für einen einzureichen Multi-Region Zugangspunkt
- **Ressourcentypen (\*erforderlich):** [multiregionaccesspoint\*](#list_s3-resource-multiregionaccesspoint)
- **Bedingungsschlüssel:** [s3:AccessPointNetworkOrigin](#list_s3-s3_AccessPointNetworkOrigin)
[s3:authType](#list_s3-s3_authType)
[s3:DataAccessPointAccount](#list_s3-s3_DataAccessPointAccount)
[s3:DataAccessPointArn](#list_s3-s3_DataAccessPointArn)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
- **Zugriffsebene:** Schreiben
- ** [TagResource](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_TagResource.html) **
- **Description:** Gewährt die Berechtigung zum Hinzufügen von Tags zur angegebenen Ressource
- **Ressourcentypen (\*erforderlich):** [accessgrant](#list_s3-resource-accessgrant) / **Bedingungsschlüssel:** [aws:RequestTag/${TagKey}](#list_s3-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_s3-aws_TagKeys)
[s3:authType](#list_s3-s3_authType)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Ressourcentypen (\*erforderlich):** [accessgrantsinstance](#list_s3-resource-accessgrantsinstance) / **Bedingungsschlüssel:** [aws:RequestTag/${TagKey}](#list_s3-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_s3-aws_TagKeys)
[s3:authType](#list_s3-s3_authType)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Ressourcentypen (\*erforderlich):** [accessgrantslocation](#list_s3-resource-accessgrantslocation) / **Bedingungsschlüssel:** [aws:RequestTag/${TagKey}](#list_s3-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_s3-aws_TagKeys)
[s3:authType](#list_s3-s3_authType)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Ressourcentypen (\*erforderlich):** [accesspoint](#list_s3-resource-accesspoint) / **Bedingungsschlüssel:** [aws:RequestTag/${TagKey}](#list_s3-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_s3-aws_TagKeys)
[s3:AccessPointNetworkOrigin](#list_s3-s3_AccessPointNetworkOrigin)
[s3:AccessPointTag/${TagKey}](#list_s3-s3_AccessPointTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:DataAccessPointAccount](#list_s3-s3_DataAccessPointAccount)
[s3:DataAccessPointArn](#list_s3-s3_DataAccessPointArn)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Ressourcentypen (\*erforderlich):** [bucket](#list_s3-resource-bucket) / **Bedingungsschlüssel:** [aws:RequestTag/${TagKey}](#list_s3-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_s3-aws_TagKeys)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Ressourcentypen (\*erforderlich):** [storagelensgroup](#list_s3-resource-storagelensgroup) / **Bedingungsschlüssel:** [aws:RequestTag/${TagKey}](#list_s3-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_s3-aws_TagKeys)
[s3:authType](#list_s3-s3_authType)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Taggen, schreiben
- ** [UntagResource](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_UntagResource.html) **
- **Description:** Gewährt die Berechtigung zum Entfernen von Tags aus der angegebenen Ressource
- **Ressourcentypen (\*erforderlich):** [accessgrant](#list_s3-resource-accessgrant) / **Bedingungsschlüssel:** [aws:RequestTag/${TagKey}](#list_s3-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_s3-aws_TagKeys)
[s3:authType](#list_s3-s3_authType)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Ressourcentypen (\*erforderlich):** [accessgrantsinstance](#list_s3-resource-accessgrantsinstance) / **Bedingungsschlüssel:** [aws:RequestTag/${TagKey}](#list_s3-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_s3-aws_TagKeys)
[s3:authType](#list_s3-s3_authType)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Ressourcentypen (\*erforderlich):** [accessgrantslocation](#list_s3-resource-accessgrantslocation) / **Bedingungsschlüssel:** [aws:RequestTag/${TagKey}](#list_s3-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_s3-aws_TagKeys)
[s3:authType](#list_s3-s3_authType)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Ressourcentypen (\*erforderlich):** [accesspoint](#list_s3-resource-accesspoint) / **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_s3-aws_TagKeys)
[s3:AccessPointNetworkOrigin](#list_s3-s3_AccessPointNetworkOrigin)
[s3:AccessPointTag/${TagKey}](#list_s3-s3_AccessPointTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:DataAccessPointAccount](#list_s3-s3_DataAccessPointAccount)
[s3:DataAccessPointArn](#list_s3-s3_DataAccessPointArn)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Ressourcentypen (\*erforderlich):** [bucket](#list_s3-resource-bucket) / **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_s3-aws_TagKeys)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Ressourcentypen (\*erforderlich):** [storagelensgroup](#list_s3-resource-storagelensgroup) / **Bedingungsschlüssel:** [aws:RequestTag/${TagKey}](#list_s3-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_s3-aws_TagKeys)
[s3:authType](#list_s3-s3_authType)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Taggen, Schreiben
- ** [UpdateAccessGrantsLocation](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_UpdateAccessGrantsLocation.html) **
- **Description:** Gewährt die Berechtigung zum Aktualisieren eines Access Grants-Speicherorts
- **Ressourcentypen (\*erforderlich):** [accessgrantslocation\*](#list_s3-resource-accessgrantslocation)
- **Bedingungsschlüssel:** [aws:RequestTag/${TagKey}](#list_s3-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_s3-aws_TagKeys)
[s3:AccessGrantsLocationScope](#list_s3-s3_AccessGrantsLocationScope)
[s3:authType](#list_s3-s3_authType)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Verwaltung von Berechtigungen, Schreiben
- ** [UpdateBucketMetadataAnnotationTableConfiguration](https://docs.aws.amazon.com/AmazonS3/latest/API/API_UpdateBucketMetadataAnnotationTableConfiguration.html) **
- **Description:** Erteilt die Berechtigung, die Konfiguration der Annotationstabelle für einen Bucket zu aktualisieren
- **Ressourcentypen (\*erforderlich):** [bucket\*](#list_s3-resource-bucket)
- **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Schreiben
- ** [UpdateBucketMetadataInventoryTableConfiguration](https://docs.aws.amazon.com/AmazonS3/latest/API/API_UpdateBucketMetadataInventoryTableConfiguration.html) **
- **Description:** Erteilt die Berechtigung, die Inventartabellenkonfiguration in einer vorhandenen S3-Metadatenkonfiguration für einen bestimmten Allzweck-Bucket zu aktualisieren
- **Ressourcentypen (\*erforderlich):** [bucket\*](#list_s3-resource-bucket)
- **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Schreiben
- ** [UpdateBucketMetadataJournalTableConfiguration](https://docs.aws.amazon.com/AmazonS3/latest/API/API_UpdateBucketMetadataJournalTableConfiguration.html) **
- **Description:** Erteilt die Berechtigung, die Journaltabellenkonfiguration in einer vorhandenen S3-Metadatenkonfiguration für einen bestimmten Allzweck-Bucket zu aktualisieren
- **Ressourcentypen (\*erforderlich):** [bucket\*](#list_s3-resource-bucket)
- **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Schreiben
- ** [UpdateJobPriority](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_UpdateJobPriority.html) **
- **Description:** Gewährt die Berechtigung zum Aktualisieren der Priorität einer vorhandenen Aufgabe
- **Ressourcentypen (\*erforderlich):** [job\*](#list_s3-resource-job)
- **Bedingungsschlüssel:** [aws:RequestTag/${TagKey}](#list_s3-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_s3-aws_TagKeys)
[s3:authType](#list_s3-s3_authType)
[s3:ExistingJobOperation](#list_s3-s3_ExistingJobOperation)
[s3:ExistingJobPriority](#list_s3-s3_ExistingJobPriority)
[s3:RequestJobPriority](#list_s3-s3_RequestJobPriority)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Schreiben
- ** [UpdateJobStatus](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_UpdateJobStatus.html) **
- **Description:** Gewährt die Berechtigung zum Aktualisieren des Status der angegebenen Aufgabe
- **Ressourcentypen (\*erforderlich):** [job\*](#list_s3-resource-job)
- **Bedingungsschlüssel:** [aws:RequestTag/${TagKey}](#list_s3-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_s3-aws_TagKeys)
[s3:authType](#list_s3-s3_authType)
[s3:ExistingJobOperation](#list_s3-s3_ExistingJobOperation)
[s3:ExistingJobPriority](#list_s3-s3_ExistingJobPriority)
[s3:JobSuspendedCause](#list_s3-s3_JobSuspendedCause)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Schreiben
- ** [UpdateObjectEncryption](https://docs.aws.amazon.com/AmazonS3/latest/API/API_UpdateObjectEncryption.html) **
- **Description:** Erteilt die Berechtigung, den serverseitigen Verschlüsselungstyp eines vorhandenen Objekts in einem Allzweck-Bucket zu aktualisieren
- **Ressourcentypen (\*erforderlich):** [accesspointobject](#list_s3-resource-accesspointobject) / **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:AccessPointNetworkOrigin](#list_s3-s3_AccessPointNetworkOrigin)
[s3:AccessPointTag/${TagKey}](#list_s3-s3_AccessPointTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:DataAccessPointAccount](#list_s3-s3_DataAccessPointAccount)
[s3:DataAccessPointArn](#list_s3-s3_DataAccessPointArn)
[s3:ExistingObjectTag/](#list_s3-s3_ExistingObjectTag_key)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
[s3:x-amz-server-side-encryption](#list_s3-s3_x-amz-server-side-encryption)
[s3:x-amz-server-side-encryption-aws-kms-key-id](#list_s3-s3_x-amz-server-side-encryption-aws-kms-key-id)
- **Ressourcentypen (\*erforderlich):** [object](#list_s3-resource-object) / **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:ExistingObjectTag/](#list_s3-s3_ExistingObjectTag_key)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
[s3:x-amz-server-side-encryption](#list_s3-s3_x-amz-server-side-encryption)
[s3:x-amz-server-side-encryption-aws-kms-key-id](#list_s3-s3_x-amz-server-side-encryption-aws-kms-key-id)
- **Zugriffsebene:** Schreiben
- ** [UpdateStorageLensGroup](https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_UpdateStorageLensGroup.html) **
- **Description:** Gewährt die Berechtigung zum Aktualisieren einer vorhandenen S3-Storage-Lens-Gruppe
- **Ressourcentypen (\*erforderlich):** [storagelensgroup\*](#list_s3-resource-storagelensgroup)
- **Bedingungsschlüssel:** [aws:RequestTag/${TagKey}](#list_s3-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_s3-aws_TagKeys)
[s3:authType](#list_s3-s3_authType)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Schreiben
## Permission-only Aktionen für Amazon S3
Die folgenden Aktionen werden von Amazon S3 definiert, können jedoch nicht direkt über eine API-Operation aufgerufen werden. Sie können nur in IAM-Richtlinienanweisungen verwendet werden, um Berechtigungen zu gewähren oder zu verweigern.
- ** [InitiateReplication](https://docs.aws.amazon.com/AmazonS3/latest/userguide/setting-repl-config-perm-overview.html) **
- **Description:** Erteilt die Berechtigung, den Replikationsprozess zu initiieren, indem der Replikationsstatus eines Objekts als „Ausstehend“ festgelegt wird
- **Ressourcentypen (\*erforderlich):** [object\*](#list_s3-resource-object)
- **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
- **Zugriffsebene:** Schreiben
- ** [PauseReplication](https://docs.aws.amazon.com/fis/latest/userguide/fis-actions-reference.html#bucket-pause-replication) **
- **Description:** Erteilt die Erlaubnis, die S3-Replikation von Ziel-Quell-Buckets zu Ziel-Buckets anzuhalten
- **Ressourcentypen (\*erforderlich):** [bucket\*](#list_s3-resource-bucket)
- **Bedingungsschlüssel:** [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:authType](#list_s3-s3_authType)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:destinationRegion](#list_s3-s3_destinationRegion)
[s3:ResourceAccount](#list_s3-s3_ResourceAccount)
[s3:signatureAge](#list_s3-s3_signatureAge)
[s3:signatureversion](#list_s3-s3_signatureversion)
[s3:TlsVersion](#list_s3-s3_TlsVersion)
[s3:x-amz-content-sha256](#list_s3-s3_x-amz-content-sha256)
- **Zugriffsebene:** Schreiben
## Von Amazon S3 definierte Ressourcentypen
Die folgenden Ressourcentypen werden von diesem Service definiert und können im Element `Resource` von IAM-Berechtigungsrichtlinienanweisungen verwendet werden.
| Ressourcentypen | ARN | Bedingungsschlüssel |
| --- | --- | --- |
| [accessgrant](https://docs.aws.amazon.com/AmazonS3/latest/userguide/access-grants-grant.html) | arn:${Partition}:s3:${Region}:${Account}:access-grants/default/grant/${Token} | [aws:RequestTag/${TagKey}](#list_s3-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_s3-aws_TagKeys) |
| [accessgrantsinstance](https://docs.aws.amazon.com/AmazonS3/latest/userguide/access-grants-instance.html) | arn:${Partition}:s3:${Region}:${Account}:access-grants/default | [aws:RequestTag/${TagKey}](#list_s3-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_s3-aws_TagKeys) |
| [accessgrantslocation](https://docs.aws.amazon.com/AmazonS3/latest/userguide/access-grants-location.html) | arn:${Partition}:s3:${Region}:${Account}:access-grants/default/location/${Token} | [aws:RequestTag/${TagKey}](#list_s3-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_s3-aws_TagKeys) |
| [accesspoint](https://docs.aws.amazon.com/AmazonS3/latest/userguide/access-points.html) | arn:${Partition}:s3:${Region}:${Account}:accesspoint/${AccessPointName} | [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:AccessPointNetworkOrigin](#list_s3-s3_AccessPointNetworkOrigin)
[s3:AccessPointTag/${TagKey}](#list_s3-s3_AccessPointTag___TagKey_)
[s3:DataAccessPointAccount](#list_s3-s3_DataAccessPointAccount)
[s3:DataAccessPointArn](#list_s3-s3_DataAccessPointArn) |
| [accesspointobject](https://docs.aws.amazon.com/AmazonS3/latest/userguide/access-points.html) | arn:${Partition}:s3:${Region}:${Account}:accesspoint/${AccessPointName}/object/${ObjectName} | [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:AccessPointNetworkOrigin](#list_s3-s3_AccessPointNetworkOrigin)
[s3:AccessPointTag/${TagKey}](#list_s3-s3_AccessPointTag___TagKey_)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_)
[s3:DataAccessPointAccount](#list_s3-s3_DataAccessPointAccount)
[s3:DataAccessPointArn](#list_s3-s3_DataAccessPointArn) |
| [bucket](https://docs.aws.amazon.com/AmazonS3/latest/userguide/UsingBucket.html) | arn:${Partition}:s3:::${BucketName} | [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_) |
| [job](https://docs.aws.amazon.com/AmazonS3/latest/userguide/batch-ops-managing-jobs.html) | arn:${Partition}:s3:${Region}:${Account}:job/${JobId} | [aws:RequestTag/${TagKey}](#list_s3-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_s3-aws_TagKeys) |
| [multiregionaccesspoint](https://docs.aws.amazon.com/AmazonS3/latest/userguide/MultiRegionAccessPointRequests.html) | arn:${Partition}:s3::${Account}:accesspoint/${AccessPointAlias} | |
| [multiregionaccesspointrequestarn](https://docs.aws.amazon.com/AmazonS3/latest/userguide/MultiRegionAccessPointRequests.html) | arn:${Partition}:s3:us-west-2:${Account}:async-request/mrap/${Operation}/${Token} | |
| [object](https://docs.aws.amazon.com/AmazonS3/latest/userguide/UsingObjects.html) | arn:${Partition}:s3:::${BucketName}/${ObjectName} | [aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[s3:BucketTag/${TagKey}](#list_s3-s3_BucketTag___TagKey_) |
| [objectlambdaaccesspoint](https://docs.aws.amazon.com/AmazonS3/latest/userguide/transforming-objects.html) | arn:${Partition}:s3-object-lambda:${Region}:${Account}:accesspoint/${AccessPointName} | |
| [storagelensconfiguration](https://docs.aws.amazon.com/AmazonS3/latest/userguide/storage_lens.html) | arn:${Partition}:s3:${Region}:${Account}:storage-lens/${ConfigId} | [aws:RequestTag/${TagKey}](#list_s3-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_s3-aws_TagKeys) |
| [storagelensgroup](https://docs.aws.amazon.com/AmazonS3/latest/userguide/storage_lens_group.html) | arn:${Partition}:s3:${Region}:${Account}:storage-lens-group/${Name} | [aws:RequestTag/${TagKey}](#list_s3-aws_RequestTag___TagKey_)
[aws:ResourceTag/${TagKey}](#list_s3-aws_ResourceTag___TagKey_)
[aws:TagKeys](#list_s3-aws_TagKeys) |
## Bedingungsschlüssel für Amazon S3
Amazon S3 definiert die folgenden Bedingungsschlüssel, die im Element `Condition` einer IAM-Richtlinie verwendet werden können.
| Bedingungsschlüssel | Beschreibung | Typ |
| --- | --- | --- |
| [aws:RequestTag/${TagKey}](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-requesttag) | Filtert den Zugriff durch die Tags, die in der Anfrage übergeben werden | String |
| [aws:ResourceTag/${TagKey}](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-resourcetag) | Filtert den Zugriff basierend auf den Tags, die der Ressource zugeordnet sind. | String |
| [aws:TagKeys](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-tagkeys) | Filtert den Zugriff basierend auf den Tag-Schlüssel, die in der Anfrage übergeben werden | ArrayOfString |
| [s3:AccessGrantScope](https://docs.aws.amazon.com/AmazonS3/latest/userguide/access-grants-grant.html) | Filtert den Zugriff nach dem Umfang der Zugriffsgewährung | String |
| [s3:AccessGrantsInstanceArn](https://docs.aws.amazon.com/AmazonS3/latest/userguide/access-grants-instance.html) | Filtert den Zugriff nach dem ARN der Zugriffsgewährungsinstanz | ARN |
| [s3:AccessGrantsLocationScope](https://docs.aws.amazon.com/AmazonS3/latest/userguide/access-grants-location.html) | Filtert den Zugriff nach Standort, Umfang der Zugriffsgewährung, Standort | String |
| [s3:AccessPointNetworkOrigin](https://docs.aws.amazon.com/AmazonS3/latest/userguide/creating-access-points.html#access-points-policies) | Filtert den Zugriff nach Netzwerkursprung (Internet oder VPC) | String |
| [s3:AccessPointTag/${TagKey}](https://docs.aws.amazon.com/AmazonS3/latest/userguide/access-points.html#tagging-and-policies) | Filtert den Zugriff anhand des Schlüssels und Werts des vorhandenen Zugriffspunkt-Tags | String |
| [s3:BucketTag/${TagKey}](https://docs.aws.amazon.com/AmazonS3/latest/userguide/buckets-tagging.html) | Filtert den Zugriff anhand der mit dem Bucket verknüpften Tags | String |
| [s3:DataAccessPointAccount](https://docs.aws.amazon.com/AmazonS3/latest/userguide/creating-access-points.html#access-points-policies) | Filtert den Zugriff nach AWS Konto-ID, der der Access Point gehört | String |
| [s3:DataAccessPointArn](https://docs.aws.amazon.com/AmazonS3/latest/userguide/creating-access-points.html#access-points-policies) | Filtert den Zugriff nach Amazon-Ressourcenname (ARN) des Zugriffspunkts | ARN |
| [s3:ExistingJobOperation](https://docs.aws.amazon.com/AmazonS3/latest/userguide/batch-ops-job-tags-examples.html) | Filtert den Zugriff auf die Aktualisierung der Aufgabenpriorität nach Operation. | String |
| [s3:ExistingJobPriority](https://docs.aws.amazon.com/AmazonS3/latest/userguide/batch-ops-job-tags-examples.html) | Filtert den Zugriff auf das Abbrechen vorhandener Aufgaben nach Prioritätsbereich | Numeric |
| [s3:ExistingObjectTag/](https://docs.aws.amazon.com/AmazonS3/latest/userguide/object-tagging.html#tagging-and-policies) | Filtert den Zugriff nach vorhandenem Objekt-Tag-Schlüssel und -Wert | String |
| [s3:InventoryAccessibleOptionalFields](https://docs.aws.amazon.com/AmazonS3/latest/userguide/example-bucket-policies.html#example-bucket-policies-s3-inventory-2) | Filtert den Zugriff, indem er einschränkt, welche optionalen Metadatenfelder ein Benutzer bei der Konfiguration von S3-Inventarberichten hinzufügen kann | ArrayOfString |
| [s3:JobSuspendedCause](https://docs.aws.amazon.com/AmazonS3/latest/userguide/batch-ops-job-tags-examples.html) | Filtert den Zugriff der durch einen bestimmten Abbruchsgrund angehaltenen Aufträge (z. B. AWAITING\_CONFIRMATION) zum abbrechen angehaltener Aufträgel | String |
| [s3:ObjectCreationOperation](https://docs.aws.amazon.com/AmazonS3/latest/userguide/conditional-writes-enforce.html) | Filtert den Zugriff danach, ob durch den Vorgang ein Objekt erstellt wird oder nicht | Bool |
| [s3:RequestJobOperation](https://docs.aws.amazon.com/AmazonS3/latest/userguide/batch-ops-job-tags-examples.html) | Filtert den Zugriff auf das Erstellen von Aufträge nach Operation | String |
| [s3:RequestJobPriority](https://docs.aws.amazon.com/AmazonS3/latest/userguide/batch-ops-job-tags-examples.html) | Filtert den Zugriff auf das Erstellen neuer Aufträge nach Prioritätsbereich | Numeric |
| [s3:RequestObjectTag/](https://docs.aws.amazon.com/AmazonS3/latest/userguide/object-tagging.html#tagging-and-policies) | Filtert den Zugriff nach den Tag-Schlüsseln und -Werten, die Objekten hinzugefügt werden sollen | String |
| [s3:RequestObjectTagKeys](https://docs.aws.amazon.com/AmazonS3/latest/userguide/object-tagging.html#tagging-and-policies) | Filtert den Zugriff nach den Tag-Schlüsseln, die zu Objekten hinzugefügt werden sollen | ArrayOfString |
| [s3:ResourceAccount](https://docs.aws.amazon.com/AmazonS3/latest/userguide/amazon-s3-policy-keys.html#example-object-resource-account) | Filtert den Zugriff durch den Ressourcenbesitzer AWS-Konto ID | String |
| [s3:TlsVersion](https://docs.aws.amazon.com/AmazonS3/latest/userguide/amazon-s3-policy-keys.html#example-object-tls-version) | Filtert den Zugriff nach der TLS-Version, die vom Client verwendet wird | Numeric |
| [s3:annotation-prefix](https://docs.aws.amazon.com/AmazonS3/latest/userguide/amazon-s3-policy-keys.html#example-annotation-prefix-condition) | Filtert den Zugriff nach dem in der Anfrage angegebenen Präfix für den Namen der Anmerkung | String |
| [s3:authType](https://docs.aws.amazon.com/AmazonS3/latest/API/bucket-policy-s3-sigv4-conditions.html) | Filtert den Zugriff nach Authentifizierungsmethode | String |
| [s3:delimiter](https://docs.aws.amazon.com/AmazonS3/latest/userguide/walkthrough1.html) | Filtert den Zugriff nach Trennzeichen-Parameter | String |
| [s3:deliverySourceArn](https://docs.aws.amazon.com/AmazonS3/latest/userguide/ServerLogs.html) | Filtert den Zugriff nach einer bestimmten Versandquelle Amazon Resource Name (ARN) | ARN |
| [s3:destinationRegion](https://docs.aws.amazon.com/AmazonS3/latest/userguide/replication.html) | Filtert den Zugriff nach einer bestimmten Replikationszielregion für bestimmte Buckets der AWS FIS-Aktion aws:s3:bucket-pause-replication | String |
| [s3:if-match](https://docs.aws.amazon.com/AmazonS3/latest/userguide/conditional-writes-enforce.html) | Filtert den Zugriff nach dem Wert 'der AnfrageIf-Match'bedingter Header | String |
| [s3:if-none-match](https://docs.aws.amazon.com/AmazonS3/latest/userguide/conditional-writes-enforce.html) | Filtert den Zugriff nach dem Wert 'der AnfrageIf-None-Match'bedingter Header | String |
| [s3:isReplicationPauseRequest](https://docs.aws.amazon.com/fis/latest/userguide/security_iam_id-based-policy-examples.html#security-iam-policy-examples-s3) | Filtert den Zugriff nach Anfrage über AWS FIS-Aktion aws:s3:bucket-pause-replication | Bool |
| [s3:locationconstraint](https://docs.aws.amazon.com/AmazonS3/latest/userguide/amazon-s3-policy-keys.html#condition-key-bucket-ops-1) | Filtert den Zugriff nach einer bestimmten Region | String |
| [s3:logType](https://docs.aws.amazon.com/AmazonS3/latest/userguide/ServerLogs.html) | Filtert den Zugriff nach einem bestimmten Protokolltyp und unterstützt derzeit S3\_SERVER\_ACCESS\_LOGS | String |
| [s3:max-annotation-results](https://docs.aws.amazon.com/AmazonS3/latest/userguide/amazon-s3-policy-keys.html#example-annotation-max-results) | Filtert den Zugriff nach der maximalen Anzahl angeforderter Annotationsergebnisse | Numeric |
| [s3:max-keys](https://docs.aws.amazon.com/AmazonS3/latest/userguide/amazon-s3-policy-keys.html#example-numeric-condition-operators) | Filtert den Zugriff nach der maximalen Anzahl von Schlüsseln, die in einem zurückgegeben werden ListBucket anfordern | Numeric |
| [s3:object-lock-event-hold](https://docs.aws.amazon.com/AmazonS3/latest/userguide/object-lock-managing.html#object-lock-managing-condition-event-hold) | Filtert den Zugriff nach dem Haltestatus des Objektereignisses (EIN oder AUS) | String |
| [s3:object-lock-event-hold-duration-days](https://docs.aws.amazon.com/AmazonS3/latest/userguide/object-lock-managing.html#object-lock-managing-condition-event-hold-duration-days) | Filtert den Zugriff nach dem Objekt, der Speicherdauer des Ereignisses in Tagen | Numeric |
| [s3:object-lock-legal-hold](https://docs.aws.amazon.com/AmazonS3/latest/userguide/object-lock-overview.html#object-lock-legal-holds) | Filtert den Zugriff nach dem rechtlichen Haltestatus des Objekts | String |
| [s3:object-lock-mode](https://docs.aws.amazon.com/AmazonS3/latest/userguide/object-lock-overview.html#object-lock-retention-modes) | Filtert den Zugriff nach dem Aufbewahrungsmodus des Objekts (Compliance oder Governance) | String |
| [s3:object-lock-remaining-retention-days](https://docs.aws.amazon.com/AmazonS3/latest/userguide/object-lock-managing.html#object-lock-managing-retention-limits) | Filtert den Zugriff nach den verbleibenden Aufbewahrungstagen des Objekts | Numeric |
| [s3:object-lock-retain-until-date](https://docs.aws.amazon.com/AmazonS3/latest/userguide/object-lock-overview.html#object-lock-retention-periods) | Filtert den Zugriff nach Datum der Objektaufbewahrung | Date |
| [s3:prefix](https://docs.aws.amazon.com/AmazonS3/latest/userguide/amazon-s3-policy-keys.html#condition-key-bucket-ops-2) | Filtert den Zugriff nach Schlüsselnamenpräfix | String |
| [s3:resourceArnBeingAuthorized](https://docs.aws.amazon.com/AmazonS3/latest/userguide/ServerLogs.html) | Filtert den Zugriff anhand des Amazon-Ressourcennamens (ARN) des Quell-Buckets | ARN |
| [s3:signatureAge](https://docs.aws.amazon.com/AmazonS3/latest/API/bucket-policy-s3-sigv4-conditions.html) | Filtert den Zugriff nach dem Alter der Anforderungssignatur in Millisekunden | Numeric |
| [s3:signatureversion](https://docs.aws.amazon.com/AmazonS3/latest/API/bucket-policy-s3-sigv4-conditions.html) | Filtert den Zugriff nach der Version von AWS Signatur, die für die Anfrage verwendet wurde | String |
| [s3:versionid](https://docs.aws.amazon.com/AmazonS3/latest/userguide/amazon-s3-policy-keys.html#getobjectversion-limit-access-to-specific-version-3) | Filtert den Zugriff nach bestimmten Objektversionen | String |
| [s3:x-amz-acl](https://docs.aws.amazon.com/AmazonS3/latest/userguide/acl-overview.html#permissions) | Filtert den Zugriff nach einer gesicherten ACL im x-amz-acl-Header der Anforderung | String |
| [s3:x-amz-bucket-namespace](https://docs.aws.amazon.com/AmazonS3/latest/userguide/gpbucketnamespaces.html) | Filtert den Zugriff nach dem allgemeinen Bucket-Namespace-Typ | String |
| [s3:x-amz-content-sha256](https://docs.aws.amazon.com/AmazonS3/latest/API/bucket-policy-s3-sigv4-conditions.html) | Filtert den Zugriff auf nicht signierte Inhalte in Ihrem Bucket | String |
| [s3:x-amz-copy-source](https://docs.aws.amazon.com/AmazonS3/latest/userguide/amazon-s3-policy-keys.html#putobject-limit-copy-source-3) | Filtert den Zugriff nach Kopierquellen-Bucket, Präfix oder Objekt in den Kopierobjektanforderungen | String |
| [s3:x-amz-grant-full-control](https://docs.aws.amazon.com/AmazonS3/latest/userguide/acl-overview.html#permissions) | Filtert den Zugriff mit dem Header „x-amz-grant-full-control“ (vollständige Kontrolle) | String |
| [s3:x-amz-grant-read](https://docs.aws.amazon.com/AmazonS3/latest/userguide/acl-overview.html#permissions) | Filtert den Zugriff mit dem Header „x-amz-grant-read“ (Lesezugriff) | String |
| [s3:x-amz-grant-read-acp](https://docs.aws.amazon.com/AmazonS3/latest/userguide/acl-overview.html#permissions) | Filtert den Zugriff mit dem Header „x-amz-grant-read-acp (Leseberechtigungen für die ACL) | String |
| [s3:x-amz-grant-write](https://docs.aws.amazon.com/AmazonS3/latest/userguide/acl-overview.html#permissions) | Filtert den Zugriff mit dem Header „x-amz-grant-write“ (Schreibzugriff) | String |
| [s3:x-amz-grant-write-acp](https://docs.aws.amazon.com/AmazonS3/latest/userguide/acl-overview.html#permissions) | Filtert den Zugriff mit dem Header „x-amz-grant-write-acp“ (Schreibberechtigungen für die ACL) | String |
| [s3:x-amz-metadata-directive](https://docs.aws.amazon.com/AmazonS3/latest/API/API_CopyObject.html) | Filtert den Zugriff nach Objekt-Metadatenverhalten (COPY oder REPLACE) beim Kopieren von Objekten | String |
| [s3:x-amz-object-annotation-directive](https://docs.aws.amazon.com/AmazonS3/latest/API/API_CopyObject.html) | Filtert den Zugriff über die in der Anfrage angegebene Anweisung zum Kopieren von Anmerkungen | String |
| [s3:x-amz-object-if-match](https://docs.aws.amazon.com/AmazonS3/latest/userguide/amazon-s3-policy-keys.html#example-annotation-conditional-writes) | Filtert den ETag-Zugriff auf die in der Anfrage angegebene Objektversion | String |
| [s3:x-amz-object-ownership](https://docs.aws.amazon.com/AmazonS3/latest/userguide/ensure-object-ownership.html#object-ownership-requiring-bucket-owner-enforced) | Filtert den Zugriff nach Objektbesitz | String |
| [s3:x-amz-server-side-encryption](https://docs.aws.amazon.com/AmazonS3/latest/userguide/UsingServerSideEncryption.html) | Filtert den Zugriff nach serverseitiger Verschlüsselung | String |
| [s3:x-amz-server-side-encryption-aws-kms-key-id](https://docs.aws.amazon.com/AmazonS3/latest/userguide/UsingKMSEncryption.html#require-sse-kms) | Filtert den Zugriff nach AWS Vom Kunden verwaltetes CMK für serverseitige Verschlüsselung | ARN |
| [s3:x-amz-server-side-encryption-customer-algorithm](https://docs.aws.amazon.com/AmazonS3/latest/userguide/ServerSideEncryptionCustomerKeys.html) | Filtert den Zugriff nach vom Kunden angegebenen Algorithmus für die serverseitige Verschlüsselung | String |
| [s3:x-amz-storage-class](https://docs.aws.amazon.com/AmazonS3/latest/userguide/storage-class-intro.html#sc-howtoset) | Filtert den Zugriff nach Speicherklasse | String |
| [s3:x-amz-website-redirect-location](https://docs.aws.amazon.com/AmazonS3/latest/userguide/how-to-page-redirect.html#page-redirect-using-rest-api) | Filtert den Zugriff nach bestimmten Websiteumleitungsorten für Buckets, die als statische Websites konfiguriert sind | String |