Merge pull request #146 from alinabuzachis/s3_tagging_policy

Add S3 object tagging policies
mattclay · Apr 29, 2021 · 6e108f0 · 6e108f0
2 parents eb8f374 + c10aa16
commit 6e108f0
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/aws/policy/storage-services.yaml b/aws/policy/storage-services.yaml
@@ -7,6 +7,8 @@ Statement:
       - s3:DeleteBucket
       - s3:DeleteBucketOwnershipControls
       - s3:DeleteObject
+      - s3:DeleteObjectTagging
+      - s3:DeleteObjectVersionTagging
       - s3:GetBucketAccelerateConfiguration
       - s3:GetBucketAcl
       - s3:GetBucketCors
@@ -30,6 +32,8 @@ Statement:
       - s3:GetMetricsConfiguration
       - s3:GetObject
       - s3:GetObjectVersion
+      - s3:GetObjectTagging
+      - s3:GetObjectVersionTagging
       - s3:GetPublicAccessBlock
       - s3:HeadBucket
       - s3:HeadObject
@@ -50,6 +54,8 @@ Statement:
       - s3:PutLifecycleConfiguration
       - s3:PutObject
       - s3:PutObjectAcl
+      - s3:PutObjectTagging
+      - s3:PutObjectVersionTagging
     Resource: "*"
 
   - Sid: AllowGlobalUnrestrictedResourceActionsWhichIncurFees