S3 policy conditions: document s3:RequestObjectTag/<key> and s3:RequestObjectTagKeys

chrislusf committed 2026-10-24 01:32:40 -07:00
1 parent 061448f9cd
commit 0284c72753
1 file changed
+2
+2
@@ -107,6 +107,8 @@ Prefix any string operator with `ForAnyValue:` or `ForAllValues:` for multi-valu
| `s3:delimiter` | String | Delimiter parameter from list operations |
| `s3:max-keys` | Numeric | Max keys parameter from list operations |
| `s3:ExistingObjectTag/<key>` | String | Value of an existing object tag |
| `s3:RequestObjectTag/<key>` | String | Value of a tag the request sets via `X-Amz-Tagging` (PutObject, copy with `REPLACE`, CreateMultipartUpload) |
| `s3:RequestObjectTagKeys` | String set | Tag keys the request sets via `X-Amz-Tagging`; use with `ForAllValues:`/`ForAnyValue:` |
| `s3:RequestMethod` | String | HTTP method (GET, PUT, POST, DELETE) |
| `s3:authType` | String | Auth type (`REST-HEADER` or `REST-QUERY-STRING`) |