Skip to content
Skip to contents
Skip to reading controls

Search skills⌘K

Setting the file. One moment.

This file

Type

Size

Lines

Position

aws
/
aws/agent-toolkit-for-aws

IAM Permissions · Securing S3 Buckets · aws/agent-toolkit-for-aws · Skills Docs

Issue No. 14 · Securing S3 Buckets

↖Back to the cover

Analytics Skills

Amazon Opensearch Service
AWS Cleanrooms
Connecting To Data Source
Developing Applications On Managed Service For Apache Flink
Exploring Data Catalog
Finding Data Lake Assets
Ingesting Into Data Lake
Managing Amazon Msk
Migrate To Msk
Migrating To Amazon Redshift
Querying Data Lake
Redshift Guide

AWS Agents · Agents…

Agents Build
Agents Connect
Agents Debug
Agents Deploy
Agents Get Started
Agents Harden
Agents Optimize
Agents Pay

AWS Agents For Devsecops

Analyzing Release Readiness
Chatting With AWS DevOps Agent
Coordinating Multi Space DevOps Agent
Diff Scanning With AWS Security Agent
Investigating Incidents With AWS DevOps Agent
Pentesting With AWS Security Agent
Remediating With AWS Security Agent
Running Release Tests
Scanning With AWS Security Agent

AWS Core

AWS Secrets Manager

Core Skills · AWS…

Amazon Bedrock
AWS AI ML
AWS Auth
AWS Billing And Cost Management
AWS Blocks
AWS Cdk
AWS Cloudformation
AWS Compute
AWS Containers
AWS Database

Database Skills

Amazon Aurora MySQL
Amazon Aurora PostgreSQL
Amazon Documentdb
Amazon DynamoDB
Amazon Elasticache
Amazon Keyspaces
Aurora Dsql
Creating Amazon Aurora Db Cluster With Instances
Exporting RDS To S3
RDS Db2

EC2 Skills

Creating EC2 Image Builder Pipeline
Launching EC2 Instance With Best Practices
Setting Up EC2 Instance Profiles

Messaging And Streaming Skills

Amazon Ses
AWS Social Messaging

Migration And Modernization Skills

AWS Transform
Dms Schema Conversion

Networking And Content Delivery Skills

CloudFront
Configuring VPC Endpoints For Private AWS Service Access
Connecting Vpcs With Peering
Creating Production VPC Multi Az
Directconnect
Enabling Lambda VPC Internet Access
Route53
Routing Traffic With Route53 And CloudFront
Shieldadvanced
Sitetositevpn

Operations Skills

AWS Network Monitoring
Setting Up Cloudtrail Multi Region
Setting Up CloudWatch Alarm Notifications
Troubleshooting Application Failures

Resilience Skills

Arc Region Switch
AWS Resilience Lifecycle
Recovery Controller Setup
Resilience Hub Failure Mode Assessment
Resilience Hub Getting Started
Resilience Hub Multi Account
Resilience Program Design

Security And Identity Skills

Creating Secrets Using Best Practices

Serverless Skills

AWS Lambda Durable Functions
AWS Lambda Managed Instances
AWS Lambda Microvms
AWS Step Functions
Connecting Lambda To API Gateway
Connecting Lambda To DynamoDB
Creating API Gateway Stage
Debugging Lambda Timeouts
Deploying Custom Domain REST API
Processing S3 Uploads With Step Functions

Storage Skills

Creating Data Lake Table
Securing S3 Buckets
Appendix · 5 subchapters
Storing And Querying Vectors
Troubleshooting Efs
Troubleshooting S3 Files

System Table Skills

Querying AWS CloudWatch
Querying AWS S3
Querying AWS Sagemaker Catalog

Web And Mobile Development

AWS Amplify

120 chapters · 648 min

Chapter 113 · Securing S3 Buckets

Subchapter 113.3

IAM Permissions

references/iam-permissions.mdMarkdown1 KBView on GitHub

IAM Permissions by Workflow

Minimum IAM permissions required for each workflow. Use aws iam simulate-principal-policy to validate effective permissions before write operations.

113Up to chapter 113Securing S3 Buckets

This file

Number: 113.3
Position: 3 of 5
Type: Markdown
Size: 1 KB

Nearby

Previous Encryption
Next Remediation

Source

10

Setup DevOps Agent

11Setup Security Agent

13Threat Modeling With AWS Security Agent

33

AWS Deployment

35AWS Messaging And Streaming

36AWS Networking

37AWS Observability

38AWS SDK Js V3 Usage

39AWS SDK Python Usage

40AWS SDK Swift Usage

42AWS Serverless

43Launch With AWS

44Signing In To AWS

RDS Oracle

69RDS Sqlserver

70Timestream Influxdb

88Transitgateway

Workflow	Minimum permissions needed

A — Secure New Bucket	`s3:CreateBucket`, `s3:PutBucketVersioning`, `s3:PutEncryptionConfiguration`, `s3:PutBucketLogging`, `s3:PutBucketPolicy`, `s3:GetBucketPolicy`, `s3:PutBucketAbacStatus`, `cloudtrail:DescribeTrails`, `cloudtrail:PutEventSelectors`
B — Audit	`s3:GetBucketPublicAccessBlock`, `s3:GetBucketAcl`, `s3:GetBucketOwnershipControls`, `s3:GetEncryptionConfiguration`, `s3:GetBucketVersioning`, `s3:GetBucketLogging`, `s3:GetBucketPolicy`, `s3:GetBucketObjectLockConfiguration`, `accessanalyzer:ListAnalyzers`, `accessanalyzer:ListFindings`, `cloudtrail:GetEventSelectors`, `cloudtrail:DescribeTrails`, `guardduty:ListDetectors`, `guardduty:GetDetector`
C — Remediate	`s3:PutBucketPublicAccessBlock`, `s3:GetBucketPolicy`, `s3:PutBucketPolicy`, `s3:PutEncryptionConfiguration`, `kms:CreateKey`, `kms:PutKeyPolicy`, `kms:DescribeKey`, `iam:SimulatePrincipalPolicy`
D — Encryption	`s3:PutEncryptionConfiguration`, `kms:CreateKey`, `kms:PutKeyPolicy`, `kms:DescribeKey`
E — Monitoring	`cloudtrail:DescribeTrails`, `cloudtrail:PutEventSelectors`, `guardduty:ListDetectors`, `guardduty:CreateDetector`, `config:PutConfigRule`

ReferenceEncryption ReferenceRemediation

references/iam-permissions.md

(opens in a new tab)

Raw file(opens in a new tab)

aws/agent-toolkit-for-aws(opens in a new tab)