Managing access to your Amazon S3 buckets and objects
summary
Explains concrete controls for S3 access: IAM policy vs bucket policy with JSON examples, two new condition keys s3:ResourceAccount and s3:tls-version (example denies PUTs with TLS <1.2), cross-account behavior where object writer owns objects unless bucket sets bucket-owner-preferred which transfers ownership, use of Access Analyzer preview to show “new access” and “resolved public access” findings, plus Access Points and Block Public Access demos.
AI-written summary · about
chapters (5)
- 0:00Intro
- 1:12IAM and Bucket Policies
- 7:13Access within your account vs access across accounts
- 9:44Amazon S3 Object Ownership
- 13:35Access Analyzer for S3
related talks
45mAmazon S3 encryption and access control best practices
05mAWS On Air ft. AmazonS3 Bucket Owner Inforced setting
52mIAM policy power hour
13mSimplifying data security in a complex data lake environment
18mImproving your Amazon S3 security with cost-effective practices
25mGetting started with AWS Identity Services
24mAvoiding the Curious Case of Leaky Cauldrons
19mMove toward least privilege with IAM Access Analyzer