Bucket Policy Supported Actions List

OUTSCALE Object Storage is currently based on the RING solution by Scality. This service is compatible with the Simple Storage Service (S3) API by AWS, but there are some key differences.

This page offers an exhaustive list of supported actions as part of the Bucket Policy feature. You can refer to this table to ensure your policies align with our supported features.

Comparison Table

Action Resource Description

s3:CreateMultipartUpload

Bucket

Allows to create a new multipart upload. For more information, see Creating a Multipart Upload.

For this action to work, you need to also include s3:PutObject in your policy.

s3:DeleteBucket

Bucket

Allows to delete a bucket. For more information, see Deleting a Bucket.

s3:DeleteBucketLifecycleConfiguration

Bucket

Allows to delete the lifecycle configuration set on a bucket. For more information, see Deleting a Lifecycle Configuration.

For this action to work, you need to also include s3:PutBucketTagging in your policy.

s3:DeleteBucketPolicy

Bucket

Allows to delete the bucket policy set on a bucket. For more information, see Deleting a Bucket Policy.

s3:DeleteBucketTagging

Bucket

Allows to delete the set of tags to an existing bucket. For more information, see Managing the Tags of an Object > Removing All Tags From an Object.

s3:DeleteBucketWebsite

Bucket

Allows to delete the website configuration set on a bucket. For more information, see Deleting a Bucket Website.

s3:DeleteObjectTagging

Object

Allows to delete the set of tags to an object. For more information, see Managing the Tags of an Object > Removing All Tags From an Object.

s3:GetBucketAcl

Bucket

Allows to use the ACL (Access Control List) subresource to return the ACL of a bucket. For more information, see Getting Information About a Bucket ACL.

s3:GetBucketCors

Bucket

Allows to return the CORS (Cross-Origin Resource Sharing) configuration information set for a bucket. For more information, see Getting Information About the CORS Configuration of a Bucket.

s3:GetBucketObjectLockConfiguration

Bucket

Allows to return the Object Lock configuration information set for a bucket. For more information, see Configuring a Default Object Lock on Your Bucket > Getting Information About an Object Lock Configuration.

For this action to work, you need to add a trailing slash (/) at the end of the resource in your policy. For example:

"Resource":"arn:aws:s3:::example-bucket/""

s3:GetBucketPolicy

Bucket

Allows to return the policy set on a bucket. For more information, see Getting Information About a Bucket Policy.

s3:GetBucketTagging

Bucket

Allows to return the tag set associated with a bucket.

s3:GetBucketVersioning

Bucket

Allows to return the versioning state of a bucket. For more information, see Getting Information About Bucket Versioning.

s3:GetBucketWebsite

Bucket

Allows to return the configuration of the website specified in the website subresource. For more information, see Getting Information About a Bucket Website.

s3:GetEncryptionConfiguration

Bucket

Allows to return the default encryption configuration of a bucket.

s3:GetLifecycleConfiguration

Bucket

Allows to return the lifecycle configuration set on a bucket. For more information, see Getting Information About the Lifecycle Configuration of Your Bucket.

s3:GetObject

Object

Allows to retrieve objects. For more information, see Downloading an Object from a Bucket.

s3:GetObjectRetention

Object

Allows to return the retention settings of an object. For more information, see Configuring a Specific Object Lock on an Object.

s3:HeadBucket

Bucket

Allows to verify the existence of a bucket. For more information, see Getting Information About a Bucket > Checking for Bucket Existence and Access.

For this action to work, you need to also include s3:ListBucket in your policy.

s3:HeadObject

Object

Allows to verify the existence of an object. For more information, see Getting Information About the Metadata of an Object.

For this action to work, you need to also include s3:GetObject in your policy.

s3:ListBucket

Bucket

Allows to list up to 1000 objects in a bucket.

s3:ListParts

Object

Allows to list the parts already uploaded in a multipart upload. For more information, see Listing Parts in a Multipart Upload.

For this action to work, you need to also include s3:ListMultipartUploadParts in your policy.

s3:PutBucketAcl

Bucket

Allows to set ACL permissions on a bucket. For more information, see Configuring a Bucket ACL.

s3:PutBucketCors

Bucket

Allows to set a CORS configuration on a bucket. For more information, see Applying a CORS Configuration to a Bucket.

s3:PutBucketObjectLockConfiguration

Bucket

Allows to set Object Lock configuration on a bucket. For more information, see Configuring a Default Object Lock on Your Bucket > Applying an Object Lock Configuration to a Bucket.

For this action to work, you need to add a trailing slash (/) at the end of the resource in your policy. For example:

"Resource":"arn:aws:s3:::example-bucket/""

s3:PutBucketPolicy

Bucket

Allows to add or replace a bucket policy on a bucket. For more information, see Applying a Policy to Your Bucket.

s3:PutBucketTagging

Bucket

Allows to add a set of tags to a bucket.

s3:PutBucketVersioning

Bucket

Allows to set the versioning state on a bucket. For more information, see Enabling or Disabling Bucket Versioning.

s3:PutBucketWebsite

Bucket

Allows to set the website configuration specified in the website subresource. For more information, see Creating a Bucket Website.

s3:PutEncryptionConfiguration

Bucket

Allows to set an encryption configuration for a bucket.

s3:PutLifecycleConfiguration

Bucket

Allows to create a new lifecycle configuration or replace an existing lifecycle configuration on a bucket. For more information, see Applying a Lifecycle Configuration to Your Bucket.

s3:PutObject

Object

Allows to place an object in a bucket. For more information, see Uploading an Object to a Bucket.

s3:PutObjectAcl

Object

Allows to set ACL (Access Control List) permissions for new or existing objects in a bucket. For more information, see Configuring an Object ACL.

s3:PutObjectRetention

Object

Allows to set an object retention configuration on an object. For more information, see Configuring a Specific Object Lock on an Object > Locking an Object Using Retention Settings.

For this action to work, you need to also include s3:BypassGovernanceRetention in your policy.

s3:DeleteMultipartUpload

Bucket

Allows to delete a multipart upload. For more information, see Canceling a Multipart Upload.

Related Pages

AWS™ and Amazon Web Services™ are trademarks of Amazon Technologies, Inc or its affiliates in the United States and/or other countries.