NavigationContentFooter
Jump toSuggest an edit

S3 and IAM permissions equivalence

ObjectStorageFullAccess

S3 ActionIAM ResourceIAM ActionAuthorized
DeleteBucketPolicyPolicyWrite
GetBucketPolicyPolicyRead
GetBucketPolicyStatusPolicyRead
PutBucketPolicyPolicyWrite
CreateBucketBucketCreate
DeleteBucketBucketDelete
DeleteBucketCorsBucketWrite
DeleteBucketLifecycleBucketWrite
DeleteBucketTaggingBucketWrite
DeleteBucketWebsiteBucketWrite
GetBucketAclBucketRead
GetBucketCorsBucketRead
GetBucketLifecycleConfigurationBucketRead
GetBucketLocationBucketRead
GetBucketTaggingBucketRead
GetBucketVersioningBucketRead
GetBucketWebsiteBucketRead
HeadBucketBucketRead
ListBucketsBucketList
PutBucketAclBucketWrite
PutBucketCorsBucketWrite
PutBucketLifecycleConfigurationBucketWrite
PutBucketTaggingBucketWrite
PutBucketVersioningBucketWrite
PutBucketWebsiteBucketWrite
AbortMultipartUploadObjectDelete
CompleteMultipartUploadObjectCreate
CopyObjectObjectWrite
CreateMultipartUploadObjectCreate
DeleteObjectObjectDelete
DeleteObjectsObjectDelete
DeleteObjectTaggingObjectWrite
GetObjectObjectRead
GetObjectAclObjectRead
GetObjectLegalHoldObjectRead
GetObjectLockConfigurationObjectRead
GetObjectRetentionObjectRead
GetObjectTaggingObjectRead
HeadObjectObjectRead
ListMultipartUploadsObjectList
ListObjectsObjectList
ListObjectsV2ObjectList
ListObjectVersionsObjectList
ListPartsObjectList
PutObjectObjectCreate
PutObjectAclObjectWrite
PutObjectLegalHoldObjectWrite
PutObjectLockConfigurationObjectWrite
PutObjectRetentionObjectWrite
PutObjectTaggingObjectWrite
RestoreObjectObjectWrite
UploadPartObjectWrite
UploadPartCopyObjectWrite
PostObjectObjectCreate

ObjectStorageReadOnly

S3 ActionIAM ResourceIAM ActionAuthorized
AbortMultipartUploadObjectDelete
CompleteMultipartUploadObjectCreate
CopyObjectObjectWrite
CreateBucketBucketCreate
CreateMultipartUploadObjectCreate
DeleteBucketBucketDelete
DeleteBucketCorsBucketWrite
DeleteBucketLifecycleBucketWrite
DeleteBucketPolicyPolicyWrite
DeleteBucketTaggingBucketWrite
DeleteBucketWebsiteBucketWrite
DeleteObjectObjectDelete
DeleteObjectsObjectDelete
DeleteObjectTaggingObjectWrite
GetBucketAclBucketRead
GetBucketCorsBucketRead
GetBucketLifecycleConfigurationBucketRead
GetBucketLocationBucketRead
GetBucketPolicyPolicyRead
GetBucketPolicyStatusPolicyRead
GetBucketTaggingBucketRead
GetBucketVersioningBucketRead
GetBucketWebsiteBucketRead
GetObjectObjectRead
GetObjectAclObjectRead
GetObjectLegalHoldObjectRead
GetObjectLockConfigurationObjectRead
GetObjectRetentionObjectRead
GetObjectTaggingObjectRead
HeadBucketBucketRead
HeadObjectObjectRead
ListBucketsBucketList
ListMultipartUploadsObjectList
ListObjectsObjectList
ListObjectsV2ObjectList
ListObjectVersionsObjectList
ListPartsObjectList
PostObjectObjectCreate
PutBucketAclBucketWrite
PutBucketCorsBucketWrite
PutBucketLifecycleConfigurationBucketWrite
PutBucketPolicyPolicyWrite
PutBucketTaggingBucketWrite
PutBucketVersioningBucketWrite
PutBucketWebsiteBucketWrite
PutObjectObjectCreate
PutObjectAclObjectWrite
PutObjectLegalHoldObjectWrite
PutObjectLockConfigurationObjectWrite
PutObjectRetentionObjectWrite
PutObjectTaggingObjectWrite
RestoreObjectObjectWrite
UploadPartObjectWrite
UploadPartCopyObjectWrite

ObjectStorageBucketsRead

S3 ActionIAM ResourceIAM ActionAuthorized
AbortMultipartUploadObjectDelete
CompleteMultipartUploadObjectCreate
CopyObjectObjectWrite
CreateBucketBucketCreate
CreateMultipartUploadObjectCreate
DeleteBucketBucketDelete
DeleteBucketCorsBucketWrite
DeleteBucketLifecycleBucketWrite
DeleteBucketPolicyPolicyWrite
DeleteBucketTaggingBucketWrite
DeleteBucketWebsiteBucketWrite
DeleteObjectObjectDelete
DeleteObjectsObjectDelete
DeleteObjectTaggingObjectWrite
GetBucketAclBucketRead
GetBucketCorsBucketRead
GetBucketLifecycleConfigurationBucketRead
GetBucketLocationBucketRead
GetBucketPolicyPolicyRead
GetBucketPolicyStatusPolicyRead
GetBucketTaggingBucketRead
GetBucketVersioningBucketRead
GetBucketWebsiteBucketRead
GetObjectObjectRead
GetObjectAclObjectRead
GetObjectLegalHoldObjectRead
GetObjectLockConfigurationObjectRead
GetObjectRetentionObjectRead
GetObjectTaggingObjectRead
HeadBucketBucketRead
HeadObjectObjectRead
ListBucketsBucketList
ListMultipartUploadsObjectList
ListObjectsObjectList
ListObjectsV2ObjectList
ListObjectVersionsObjectList
ListPartsObjectList
PostObjectObjectCreate
PutBucketAclBucketWrite
PutBucketCorsBucketWrite
PutBucketLifecycleConfigurationBucketWrite
PutBucketPolicyPolicyWrite
PutBucketTaggingBucketWrite
PutBucketVersioningBucketWrite
PutBucketWebsiteBucketWrite
PutObjectObjectCreate
PutObjectAclObjectWrite
PutObjectLegalHoldObjectWrite
PutObjectLockConfigurationObjectWrite
PutObjectRetentionObjectWrite
PutObjectTaggingObjectWrite
RestoreObjectObjectWrite
UploadPartObjectWrite
UploadPartCopyObjectWrite

ObjectStorageBucketsWrite

S3 ActionIAM ResourceIAM ActionAuthorized
AbortMultipartUploadObjectDelete
CompleteMultipartUploadObjectCreate
CopyObjectObjectWrite
CreateBucketBucketCreate
CreateMultipartUploadObjectCreate
DeleteBucketBucketDelete
DeleteBucketCorsBucketWrite
DeleteBucketLifecycleBucketWrite
DeleteBucketPolicyPolicyWrite
DeleteBucketTaggingBucketWrite
DeleteBucketWebsiteBucketWrite
DeleteObjectObjectDelete
DeleteObjectsObjectDelete
DeleteObjectTaggingObjectWrite
GetBucketAclBucketRead
GetBucketCorsBucketRead
GetBucketLifecycleConfigurationBucketRead
GetBucketLocationBucketRead
GetBucketPolicyPolicyRead
GetBucketPolicyStatusPolicyRead
GetBucketTaggingBucketRead
GetBucketVersioningBucketRead
GetBucketWebsiteBucketRead
GetObjectObjectRead
GetObjectAclObjectRead
GetObjectLegalHoldObjectRead
GetObjectLockConfigurationObjectRead
GetObjectRetentionObjectRead
GetObjectTaggingObjectRead
HeadBucketBucketRead
HeadObjectObjectRead
ListBucketsBucketList
ListMultipartUploadsObjectList
ListObjectsObjectList
ListObjectsV2ObjectList
ListObjectVersionsObjectList
ListPartsObjectList
PostObjectObjectCreate
PutBucketAclBucketWrite
PutBucketCorsBucketWrite
PutBucketLifecycleConfigurationBucketWrite
PutBucketPolicyPolicyWrite
PutBucketTaggingBucketWrite
PutBucketVersioningBucketWrite
PutBucketWebsiteBucketWrite
PutObjectObjectCreate
PutObjectAclObjectWrite
PutObjectLegalHoldObjectWrite
PutObjectLockConfigurationObjectWrite
PutObjectRetentionObjectWrite
PutObjectTaggingObjectWrite
RestoreObjectObjectWrite
UploadPartObjectWrite
UploadPartCopyObjectWrite

ObjectStorageBucketsDelete

S3 ActionIAM ResourceIAM ActionAuthorized
AbortMultipartUploadObjectDelete
CompleteMultipartUploadObjectCreate
CopyObjectObjectWrite
CreateBucketBucketCreate
CreateMultipartUploadObjectCreate
DeleteBucketBucketDelete
DeleteBucketCorsBucketWrite
DeleteBucketLifecycleBucketWrite
DeleteBucketPolicyPolicyWrite
DeleteBucketTaggingBucketWrite
DeleteBucketWebsiteBucketWrite
DeleteObjectObjectDelete
DeleteObjectsObjectDelete
DeleteObjectTaggingObjectWrite
GetBucketAclBucketRead
GetBucketCorsBucketRead
GetBucketLifecycleConfigurationBucketRead
GetBucketLocationBucketRead
GetBucketPolicyPolicyRead
GetBucketPolicyStatusPolicyRead
GetBucketTaggingBucketRead
GetBucketVersioningBucketRead
GetBucketWebsiteBucketRead
GetObjectObjectRead
GetObjectAclObjectRead
GetObjectLegalHoldObjectRead
GetObjectLockConfigurationObjectRead
GetObjectRetentionObjectRead
GetObjectTaggingObjectRead
HeadBucketBucketRead
HeadObjectObjectRead
ListBucketsBucketList
ListMultipartUploadsObjectList
ListObjectsObjectList
ListObjectsV2ObjectList
ListObjectVersionsObjectList
ListPartsObjectList
PostObjectObjectCreate
PutBucketAclBucketWrite
PutBucketCorsBucketWrite
PutBucketLifecycleConfigurationBucketWrite
PutBucketPolicyPolicyWrite
PutBucketTaggingBucketWrite
PutBucketVersioningBucketWrite
PutBucketWebsiteBucketWrite
PutObjectObjectCreate
PutObjectAclObjectWrite
PutObjectLegalHoldObjectWrite
PutObjectLockConfigurationObjectWrite
PutObjectRetentionObjectWrite
PutObjectTaggingObjectWrite
RestoreObjectObjectWrite
UploadPartObjectWrite
UploadPartCopyObjectWrite

ObjectStorageObjectsRead

S3 ActionIAM ResourceIAM ActionAuthorized
AbortMultipartUploadObjectDelete
CompleteMultipartUploadObjectCreate
CopyObjectObjectWrite
CreateBucketBucketCreate
CreateMultipartUploadObjectCreate
DeleteBucketBucketDelete
DeleteBucketCorsBucketWrite
DeleteBucketLifecycleBucketWrite
DeleteBucketPolicyPolicyWrite
DeleteBucketTaggingBucketWrite
DeleteBucketWebsiteBucketWrite
DeleteObjectObjectDelete
DeleteObjectsObjectDelete
DeleteObjectTaggingObjectWrite
GetBucketAclBucketRead
GetBucketCorsBucketRead
GetBucketLifecycleConfigurationBucketRead
GetBucketLocationBucketRead
GetBucketPolicyPolicyRead
GetBucketPolicyStatusPolicyRead
GetBucketTaggingBucketRead
GetBucketVersioningBucketRead
GetBucketWebsiteBucketRead
GetObjectObjectRead
GetObjectAclObjectRead
GetObjectLegalHoldObjectRead
GetObjectLockConfigurationObjectRead
GetObjectRetentionObjectRead
GetObjectTaggingObjectRead
HeadBucketBucketRead
HeadObjectObjectRead
ListBucketsBucketList
ListMultipartUploadsObjectList
ListObjectsObjectList
ListObjectsV2ObjectList
ListObjectVersionsObjectList
ListPartsObjectList
PostObjectObjectCreate
PutBucketAclBucketWrite
PutBucketCorsBucketWrite
PutBucketLifecycleConfigurationBucketWrite
PutBucketPolicyPolicyWrite
PutBucketTaggingBucketWrite
PutBucketVersioningBucketWrite
PutBucketWebsiteBucketWrite
PutObjectObjectCreate
PutObjectAclObjectWrite
PutObjectLegalHoldObjectWrite
PutObjectLockConfigurationObjectWrite
PutObjectRetentionObjectWrite
PutObjectTaggingObjectWrite
RestoreObjectObjectWrite
UploadPartObjectWrite
UploadPartCopyObjectWrite

ObjectStorageObjectsWrite

S3 ActionIAM ResourceIAM ActionAuthorized
AbortMultipartUploadObjectDelete
CompleteMultipartUploadObjectCreate
CopyObjectObjectWrite
CreateBucketBucketCreate
CreateMultipartUploadObjectCreate
DeleteBucketBucketDelete
DeleteBucketCorsBucketWrite
DeleteBucketLifecycleBucketWrite
DeleteBucketPolicyPolicyWrite
DeleteBucketTaggingBucketWrite
DeleteBucketWebsiteBucketWrite
DeleteObjectObjectDelete
DeleteObjectsObjectDelete
DeleteObjectTaggingObjectWrite
GetBucketAclBucketRead
GetBucketCorsBucketRead
GetBucketLifecycleConfigurationBucketRead
GetBucketLocationBucketRead
GetBucketPolicyPolicyRead
GetBucketPolicyStatusPolicyRead
GetBucketTaggingBucketRead
GetBucketVersioningBucketRead
GetBucketWebsiteBucketRead
GetObjectObjectRead
GetObjectAclObjectRead
GetObjectLegalHoldObjectRead
GetObjectLockConfigurationObjectRead
GetObjectRetentionObjectRead
GetObjectTaggingObjectRead
HeadBucketBucketRead
HeadObjectObjectRead
ListBucketsBucketList
ListMultipartUploadsObjectList
ListObjectsObjectList
ListObjectsV2ObjectList
ListObjectVersionsObjectList
ListPartsObjectList
PostObjectObjectCreate
PutBucketAclBucketWrite
PutBucketCorsBucketWrite
PutBucketLifecycleConfigurationBucketWrite
PutBucketPolicyPolicyWrite
PutBucketTaggingBucketWrite
PutBucketVersioningBucketWrite
PutBucketWebsiteBucketWrite
PutObjectObjectCreate
PutObjectAclObjectWrite
PutObjectLegalHoldObjectWrite
PutObjectLockConfigurationObjectWrite
PutObjectRetentionObjectWrite
PutObjectTaggingObjectWrite
RestoreObjectObjectWrite
UploadPartObjectWrite
UploadPartCopyObjectWrite

ObjectStorageObjectsDelete

S3 ActionIAM ResourceIAM ActionAuthorized
AbortMultipartUploadObjectDelete
CompleteMultipartUploadObjectCreate
CopyObjectObjectWrite
CreateBucketBucketCreate
CreateMultipartUploadObjectCreate
DeleteBucketBucketDelete
DeleteBucketCorsBucketWrite
DeleteBucketLifecycleBucketWrite
DeleteBucketPolicyPolicyWrite
DeleteBucketTaggingBucketWrite
DeleteBucketWebsiteBucketWrite
DeleteObjectObjectDelete
DeleteObjectsObjectDelete
DeleteObjectTaggingObjectWrite
GetBucketAclBucketRead
GetBucketCorsBucketRead
GetBucketLifecycleConfigurationBucketRead
GetBucketLocationBucketRead
GetBucketPolicyPolicyRead
GetBucketPolicyStatusPolicyRead
GetBucketTaggingBucketRead
GetBucketVersioningBucketRead
GetBucketWebsiteBucketRead
GetObjectObjectRead
GetObjectAclObjectRead
GetObjectLegalHoldObjectRead
GetObjectLockConfigurationObjectRead
GetObjectRetentionObjectRead
GetObjectTaggingObjectRead
HeadBucketBucketRead
HeadObjectObjectRead
ListBucketsBucketList
ListMultipartUploadsObjectList
ListObjectsObjectList
ListObjectsV2ObjectList
ListObjectVersionsObjectList
ListPartsObjectList
PostObjectObjectCreate
PutBucketAclBucketWrite
PutBucketCorsBucketWrite
PutBucketLifecycleConfigurationBucketWrite
PutBucketPolicyPolicyWrite
PutBucketTaggingBucketWrite
PutBucketVersioningBucketWrite
PutBucketWebsiteBucketWrite
PutObjectObjectCreate
PutObjectAclObjectWrite
PutObjectLegalHoldObjectWrite
PutObjectLockConfigurationObjectWrite
PutObjectRetentionObjectWrite
PutObjectTaggingObjectWrite
RestoreObjectObjectWrite
UploadPartObjectWrite
UploadPartCopyObjectWrite
Cloud Products & Resources
  • Scaleway Console
  • Compute
  • Storage
  • Network
  • IoT
  • AI
Dedicated Products & Resources
  • Dedibox Console
  • Dedibox Servers
  • Network
  • Web Hosting
Scaleway
  • Scaleway.com
  • Blog
  • Careers
  • Scaleway Learning
Follow us
FacebookTwitterSlackInstagramLinkedin
ContractsLegal NoticePrivacy PolicyCookie PolicyDocumentation license
© 1999-2024 – Scaleway SAS