| s3:AbortMultipartUpload | Operator |
| s3:CreateBucket | Operator |
| s3:CreateJob | Operator |
| s3:DeleteBucket | Operator |
| s3:DeleteBucketTagging | Operator |
| s3:DeleteObject | Operator |
| s3:DeleteObjectVersion | Operator |
| s3:DeleteObjectVersionTagging | Operator |
| s3:PutBucketNotification | Operator |
| s3:PutBucketTagging | Operator |
| s3:PutBucketVersioning | Operator |
| s3:PutObject | Operator |
| s3:PutObjectRetention | Operator |
| s3:PutObjectTagging | Operator |
| s3:PutObjectVersionTagging | Operator |
| s3:RestoreObject | Operator |
| s3:UpdateJobPriority | Operator |
| s3:UpdateJobStatus | Operator |
| s3:GetObject | ReadOnly |
| s3:GetObjectTorrent | ReadOnly |
| s3:GetObjectVersion | ReadOnly |
| s3:GetObjectVersionForReplication | ReadOnly |
| s3:GetObjectVersionTorrent | ReadOnly |
| s3:HeadObject | ReadOnly |
| s3:SelectObjectContent | ReadOnly |
| s3:DescribeJob | Metadata |
| s3:DescribeMultiRegionAccessPointOperation | Metadata |
| s3:GetAccelerateConfiguration | Metadata |
| s3:GetAccessPoint | Metadata |
| s3:GetAccessPointConfigurationForObjectLambda | Metadata |
| s3:GetAccessPointForObjectLambda | Metadata |
| s3:GetAccessPointPolicy | Metadata |
| s3:GetAccessPointPolicyForObjectLambda | Metadata |
| s3:GetAccessPointPolicyStatus | Metadata |
| s3:GetAccessPointPolicyStatusForObjectLambda | Metadata |
| s3:GetAccountPublicAccessBlock | Metadata |
| s3:GetAnalyticsConfiguration | Metadata |
| s3:GetBucket | Metadata |
| s3:GetBucketAcl | Metadata |
| s3:GetBucketCORS | Metadata |
| s3:GetBucketIntelligentTieringConfiguration | Metadata |
| s3:GetBucketLocation | Metadata |
| s3:GetBucketLogging | Metadata |
| s3:GetBucketNotification | Metadata |
| s3:GetBucketObjectLockConfiguration | Metadata |
| s3:GetBucketOwnershipControls | Metadata |
| s3:GetBucketPolicy | Metadata |
| s3:GetBucketPolicyStatus | Metadata |
| s3:GetBucketPublicAccessBlock | Metadata |
| s3:GetBucketReplication | Metadata |
| s3:GetBucketRequestPayment | Metadata |
| s3:GetBucketTagging | Metadata |
| s3:GetBucketVersioning | Metadata |
| s3:GetBucketWebsite | Metadata |
| s3:GetEncryptionConfiguration | Metadata |
| s3:GetIntelligentTieringConfiguration | Metadata |
| s3:GetInventoryConfiguration | Metadata |
| s3:GetJobTagging | Metadata |
| s3:GetLifecycleConfiguration | Metadata |
| s3:GetMetricsConfiguration | Metadata |
| s3:GetMultiRegionAccessPoint | Metadata |
| s3:GetMultiRegionAccessPointPolicy | Metadata |
| s3:GetMultiRegionAccessPointPolicyStatus | Metadata |
| s3:GetMultiRegionAccessPointRoutes | Metadata |
| s3:GetObjectAcl | Metadata |
| s3:GetObjectLegalHold | Metadata |
| s3:GetObjectLockConfiguration | Metadata |
| s3:GetObjectRetention | Metadata |
| s3:GetObjectTagging | Metadata |
| s3:GetObjectVersionAcl | Metadata |
| s3:GetObjectVersionTagging | Metadata |
| s3:GetPublicAccessBlock | Metadata |
| s3:GetReplicationConfiguration | Metadata |
| s3:GetStorageLensConfiguration | Metadata |
| s3:GetStorageLensConfigurationTagging | Metadata |
| s3:GetStorageLensDashboard | Metadata |
| s3:HeadBucket | Metadata |
| s3:ListAccessPoints | Metadata |
| s3:ListAccessPointsForObjectLambda | Metadata |
| s3:ListAllMyBuckets | Metadata |
| s3:ListBucket | Metadata |
| s3:ListBucketByTags | Metadata |
| s3:ListBucketIntelligentTieringConfigurations | Metadata |
| s3:ListBucketMultipartUploads | Metadata |
| s3:ListBucketVersions | Metadata |
| s3:ListJobs | Metadata |
| s3:ListMultipartUploadParts | Metadata |
| s3:ListMultiRegionAccessPoints | Metadata |
| s3:ListRegionalBuckets | Metadata |
| s3:ListStorageLensConfigurations | Metadata |
