This section describes the minimum S3 permissions required for an IAM user using Access Key authentication.
- Bucket access: To access Amazon S3 and browse objects within a bucket, the
IAM user must have permissions to:
-
View available buckets
-
List objects within a specific bucket
Required Permissions: These permissions enable bucket discovery and navigation.
-
s3:ListAllMyBuckets– Allows the IAM user to view all available S3 buckets in the account. -
s3:ListBucket– Allows the IAM user to list and browse objects within a specific bucket.
-
- Object read access: To read files from a bucket (for cataloging, processing,
or sampling), object-level access is required.
Required permissions:
-
s3:ListAllMyBuckets -
s3:ListBucket -
s3:GetObject
Object access should be granted only for the required bucket(s).
-