It's important to note the current limitations when it comes to Effects and Actions. At present, only the following Effects and Actions are supported:

Effect: Allow

Policies versions are not supported. Please use "--version-id 1".


  1. s3:ListBucket, s3:ListBucketVersions

  2. s3:GetObject, s3:GetObjectVersion

  3. s3:GetBucketObjectLockConfiguration, s3:GetBucketVersioning, s3:GetObjectLegalHold, s3:GetObjectRetention

  4. s3:DeleteObject, s3:DeleteObjectVersion

  5. s3:PutObject

Last updated