access_grant
Gets an individual access_grant
resource
Overview
Name | access_grant |
Type | Resource |
Description | access_grant |
Id | awscc.s3.access_grant |
Fields
Name | Datatype | Description |
---|---|---|
access_grant_id | string | The ID assigned to this access grant. |
access_grants_location_id | string | The custom S3 location to be accessed by the grantee |
tags | array | |
permission | string | The level of access to be afforded to the grantee |
application_arn | string | The ARN of the application grantees will use to access the location |
s3_prefix_type | string | The type of S3SubPrefix. |
grant_scope | string | The S3 path of the data to which you are granting access. It is a combination of the S3 path of the registered location and the subprefix. |
access_grant_arn | string | The Amazon Resource Name (ARN) of the specified access grant. |
grantee | object | The principal who will be granted permission to access S3. |
access_grants_location_configuration | object | The configuration options of the grant location, which is the S3 path to the data to which you are granting access. |
region | string | AWS region. |
Methods
Currently only SELECT
is supported for this resource resource.
Example
SELECT
region,
access_grant_id,
access_grants_location_id,
tags,
permission,
application_arn,
s3_prefix_type,
grant_scope,
access_grant_arn,
grantee,
access_grants_location_configuration
FROM awscc.s3.access_grant
WHERE data__Identifier = '<AccessGrantId>';
Permissions
To operate on the access_grant
resource, the following permissions are required:
Read
s3:GetAccessGrant
Delete
s3:DeleteAccessGrant
Update
s3:TagResource