AWS::S3Express::AccessPointCfnAccessPoint
Access points simplify managing data access at scale for shared datasets in Amazon S3 . Access points are unique hostnames you create to enforce distinct permissions and network controls for all requests made through an access point. You can create hundreds of access points per bucket, each with a distinct name and permissions customized for each application. Each access point works in conjunction with the bucket policy that is attached to the underlying bucket. For more information, see [Managing access to shared datasets in directory buckets with access points](https://docs.aws.amazon.com/AmazonS3/latest/userguide/access-points-directory-buckets.html) .
Import
import { CfnAccessPoint } from 'aws-cdk-lib/aws-s3express';Or use the module namespace:
import * as s3express from 'aws-cdk-lib/aws-s3express';
// s3express.CfnAccessPointProperties
Configuration passed to the constructor as CfnAccessPointProps.
bucketRequiredstringThe name of the bucket that you want to associate the access point with.
bucketAccountIdOptionalstringThe AWS account ID that owns the bucket associated with this access point.
nameOptionalstringAn access point name consists of a base name you provide, followed by the zoneID ( AWS Local Zone) followed by the prefix `--xa-s3` . For example, accesspointname--zoneID--xa-s3.
policyOptionalanyThe access point policy associated with the specified access point.
publicAccessBlockConfigurationOptionalIResolvable | PublicAccessBlockConfigurationPropertyPublic access is blocked by default to access points for directory buckets.
scopeOptionalIResolvable | ScopePropertyYou can use the access point scope to restrict access to specific prefixes, API operations, or a combination of both. For more information, see [Manage the scope of your access points for directory buckets.](https://docs.aws.amazon.com/AmazonS3/latest/userguide/access-points-directory-buckets-manage-scope.html)
tagsOptionalCfnTag[]An array of tags that you can apply to access points. Tags are key-value pairs of metadata used to categorize your access points and control access. For more information, see [Using tags for attribute-based access control (ABAC)](https://docs.aws.amazon.com/AmazonS3/latest/userguide/tagging.html#using-tags-for-abac) .
vpcConfigurationOptionalIResolvable | VpcConfigurationPropertyIf you include this field, Amazon S3 restricts access to this access point to requests from the specified virtual private cloud (VPC).
CloudFormation Resource
This L1 construct maps directly to the following CloudFormation resource type.
Learn AWS the Practical Way
Our bi-weekly newsletter teaches hands-on AWS fundamentals. No certification fluff - just practical knowledge.
Subscribe to NewsletterQuick Facts
aws-s3expressAWS::S3Express::AccessPoint