From 0284c72753cf4b7052f6ddc8f894ce0148116323 Mon Sep 17 00:00:00 2001 From: chrislusf Date: Sat, 24 Oct 2026 01:32:40 -0700 Subject: [PATCH] S3 policy conditions: document s3:RequestObjectTag/ and s3:RequestObjectTagKeys --- S3-Policy-Conditions.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/S3-Policy-Conditions.md b/S3-Policy-Conditions.md index 6a11383..a84cc61 100644 --- a/S3-Policy-Conditions.md +++ b/S3-Policy-Conditions.md @@ -107,6 +107,8 @@ Prefix any string operator with `ForAnyValue:` or `ForAllValues:` for multi-valu | `s3:delimiter` | String | Delimiter parameter from list operations | | `s3:max-keys` | Numeric | Max keys parameter from list operations | | `s3:ExistingObjectTag/` | String | Value of an existing object tag | +| `s3:RequestObjectTag/` | String | Value of a tag the request sets via `X-Amz-Tagging` (PutObject, copy with `REPLACE`, CreateMultipartUpload) | +| `s3:RequestObjectTagKeys` | String set | Tag keys the request sets via `X-Amz-Tagging`; use with `ForAllValues:`/`ForAnyValue:` | | `s3:RequestMethod` | String | HTTP method (GET, PUT, POST, DELETE) | | `s3:authType` | String | Auth type (`REST-HEADER` or `REST-QUERY-STRING`) |