Expand s3:List* permissions for clarity
@@ -60,7 +60,15 @@ class Bucket(aws.s3.Bucket):
# actions rather than wildcards
"s3:GetObject*",
"s3:GetBucket*",
- "s3:List*",
+ "s3:ListAccessPoints",
+ "s3:ListAccessPointsForObjectLambda",
+ "s3:ListAllMyBuckets",
+ "s3:ListBucket",
+ "s3:ListBucketMultipartUploads",
+ "s3:ListBucketVersions",
+ "s3:ListJobs",
+ "s3:ListMultipartUploadParts",
+ "s3:ListStorageLensConfigurations",
],
"Resource": [bucket_arn, f"{bucket_arn}/*"],
}
@@ -124,7 +132,15 @@ class Bucket(aws.s3.Bucket):
"Action": [
"s3:GetObject*",
"s3:GetBucket*",
- "s3:List*",
+ "s3:ListAccessPoints",
+ "s3:ListAccessPointsForObjectLambda",
+ "s3:ListAllMyBuckets",
+ "s3:ListBucket",
+ "s3:ListBucketMultipartUploads",
+ "s3:ListBucketVersions",
+ "s3:ListJobs",
+ "s3:ListMultipartUploadParts",
+ "s3:ListStorageLensConfigurations",
"s3:DeleteObject",
"s3:DeleteObjectTagging",
"s3:DeleteObjectVersion",
