@cloud-copilot/iam-data/data/resourceTypes/s3.json

AWS IAM Data

{
  "accesspoint": {
    "key": "accesspoint",
    "arn": "arn:${Partition}:s3:${Region}:${Account}:accesspoint/${AccessPointName}",
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}",
      "s3:AccessPointNetworkOrigin",
      "s3:AccessPointTag/${TagKey}",
      "s3:DataAccessPointAccount",
      "s3:DataAccessPointArn"
    ]
  },
  "accesspointobject": {
    "key": "accesspointobject",
    "arn": "arn:${Partition}:s3:${Region}:${Account}:accesspoint/${AccessPointName}/object/${ObjectName}",
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}",
      "s3:AccessPointNetworkOrigin",
      "s3:AccessPointTag/${TagKey}",
      "s3:BucketTag/${TagKey}",
      "s3:DataAccessPointAccount",
      "s3:DataAccessPointArn"
    ]
  },
  "bucket": {
    "key": "bucket",
    "arn": "arn:${Partition}:s3:::${BucketName}",
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}",
      "s3:BucketTag/${TagKey}"
    ]
  },
  "object": {
    "key": "object",
    "arn": "arn:${Partition}:s3:::${BucketName}/${ObjectName}",
    "conditionKeys": [
      "aws:ResourceTag/${TagKey}",
      "s3:BucketTag/${TagKey}"
    ]
  },
  "job": {
    "key": "job",
    "arn": "arn:${Partition}:s3:${Region}:${Account}:job/${JobId}",
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:ResourceTag/${TagKey}",
      "aws:TagKeys"
    ]
  },
  "storagelensconfiguration": {
    "key": "storagelensconfiguration",
    "arn": "arn:${Partition}:s3:${Region}:${Account}:storage-lens/${ConfigId}",
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:ResourceTag/${TagKey}",
      "aws:TagKeys"
    ]
  },
  "storagelensgroup": {
    "key": "storagelensgroup",
    "arn": "arn:${Partition}:s3:${Region}:${Account}:storage-lens-group/${Name}",
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:ResourceTag/${TagKey}",
      "aws:TagKeys"
    ]
  },
  "objectlambdaaccesspoint": {
    "key": "objectlambdaaccesspoint",
    "arn": "arn:${Partition}:s3-object-lambda:${Region}:${Account}:accesspoint/${AccessPointName}"
  },
  "multiregionaccesspoint": {
    "key": "multiregionaccesspoint",
    "arn": "arn:${Partition}:s3::${Account}:accesspoint/${AccessPointAlias}"
  },
  "multiregionaccesspointrequestarn": {
    "key": "multiregionaccesspointrequestarn",
    "arn": "arn:${Partition}:s3:us-west-2:${Account}:async-request/mrap/${Operation}/${Token}"
  },
  "accessgrantsinstance": {
    "key": "accessgrantsinstance",
    "arn": "arn:${Partition}:s3:${Region}:${Account}:access-grants/default",
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:ResourceTag/${TagKey}",
      "aws:TagKeys"
    ]
  },
  "accessgrantslocation": {
    "key": "accessgrantslocation",
    "arn": "arn:${Partition}:s3:${Region}:${Account}:access-grants/default/location/${Token}",
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:ResourceTag/${TagKey}",
      "aws:TagKeys"
    ]
  },
  "accessgrant": {
    "key": "accessgrant",
    "arn": "arn:${Partition}:s3:${Region}:${Account}:access-grants/default/grant/${Token}",
    "conditionKeys": [
      "aws:RequestTag/${TagKey}",
      "aws:ResourceTag/${TagKey}",
      "aws:TagKeys"
    ]
  }
}