AWS Fundamentals Logo
AWS Fundamentals
AWS::S3::AccessGrantsLocation

S3 AccessGrantsLocation

The AWS::S3::AccessGrantsLocation resource is an Amazon S3 resource type hosted in an access grants instance which can be the target of S3 access grants.

Properties

3 configurable properties. 2 required. Click a row to see details.

Filter:
PropertyTypeFlags
IamRoleArn
string
Required
LocationScope
string
Required
Tags
Array<Tag>
Create-only

Return Values

Values returned after the resource is created. Access these with Fn::GetAtt.

AttributeTypeDescription
AccessGrantsLocationArnstringThe Amazon Resource Name (ARN) of the specified Access Grants location.
AccessGrantsLocationIdstringThe unique identifier for the specified Access Grants location.

Sample CloudFormation Template

A minimal template with required properties and common optional ones.

template.yaml
AWSTemplateFormatVersion: "2010-09-09"
Description: Sample template for AWS::S3::AccessGrantsLocation

Resources:
  MyResource:
    Type: AWS::S3::AccessGrantsLocation
    Properties:
      IamRoleArn: "arn:aws:service:region:account:resource"
      LocationScope: "value"
      Tags:
        - Key: Environment
          Value: Production

Required IAM Permissions

Permissions CloudFormation needs in your IAM role to manage this resource.

create

s3:CreateAccessGrantsLocationiam:PassRoles3:TagResource

read

s3:GetAccessGrantsLocations3:ListTagsForResource

delete

s3:DeleteAccessGrantsLocation

list

s3:ListAccessGrantsLocations

update

s3:UpdateAccessGrantsLocations3:TagResources3:UntagResourceiam:PassRole

Get the S3 Cheat Sheet

Everything you need to know about S3 on one page. HD quality, print-friendly.

Download Free Infographic

Quick Facts

ServiceS3
Properties5
Required2
TaggingSupported
Primary IDAccessGrantsLocationId

Supported Operations

CreateReadDeleteListUpdate

Immutable After Creation

These properties cannot be changed after the resource is created. Updating them triggers a replacement.

Tags

Related Resources

External Links