bucket_abacs

Creates, updates, deletes, gets or lists a bucket_abacs resource.

Overview

Name	bucket_abacs
Type	Resource
Id	aws.s3.bucket_abacs

Fields

The following fields are returned by SELECT queries:

get_bucket_abac

Name	Datatype	Description
status	string	The ABAC status of the general purpose bucket.

Methods

The following methods are available for this resource:

Name	Accessible by	Required Params	Optional Params	Description
get_bucket_abac	select	bucket, region	x-amz-expected-bucket-owner	Returns the attribute-based access control (ABAC) property of the general purpose bucket. If ABAC is enabled on your bucket, you can use tags on the bucket for access control. For more information, see Enabling ABAC in general purpose buckets.
put_bucket_abac	replace	bucket, region, AbacStatus	Content-MD5, x-amz-sdk-checksum-algorithm, x-amz-expected-bucket-owner	Sets the attribute-based access control (ABAC) property of the general purpose bucket. You must have s3:PutBucketABAC permission to perform this action. When you enable ABAC, you can use tags for access control on your buckets. Additionally, when ABAC is enabled, you must use the TagResource and UntagResource actions to manage tags on your buckets. You can nolonger use the PutBucketTagging and DeleteBucketTagging actions to tag your bucket. For more information, see Enabling ABAC in general purpose buckets.

Parameters

Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.

Name	Datatype	Description
bucket	string	The name of the general purpose bucket.
region	string	AWS region (default: us-east-1)
Content-MD5	string	The MD5 hash of the PutBucketAbac request body. For requests made using the Amazon Web Services Command Line Interface (CLI) or Amazon Web Services SDKs, this field is calculated automatically.
x-amz-expected-bucket-owner	string	The Amazon Web Services account ID of the general purpose bucket's owner.
x-amz-sdk-checksum-algorithm	string	Indicates the algorithm that you want Amazon S3 to use to create the checksum. For more information, see Checking object integrity in the Amazon S3 User Guide.

SELECT examples

get_bucket_abac

Returns the attribute-based access control (ABAC) property of the general purpose bucket. If ABAC is enabled on your bucket, you can use tags on the bucket for access control. For more information, see Enabling ABAC in general purpose buckets.

SELECT
status
FROM aws.s3.bucket_abacs
WHERE bucket = '{{ bucket }}' -- required
AND region = '{{ region }}' -- required
AND `x-amz-expected-bucket-owner` = '{{ x-amz-expected-bucket-owner }}'
;

REPLACE examples

put_bucket_abac

Sets the attribute-based access control (ABAC) property of the general purpose bucket. You must have s3:PutBucketABAC permission to perform this action. When you enable ABAC, you can use tags for access control on your buckets. Additionally, when ABAC is enabled, you must use the TagResource and UntagResource actions to manage tags on your buckets. You can nolonger use the PutBucketTagging and DeleteBucketTagging actions to tag your bucket. For more information, see Enabling ABAC in general purpose buckets.

REPLACE aws.s3.bucket_abacs
SET 
AbacStatus = '{{ AbacStatus }}'
WHERE 
bucket = '{{ bucket }}' --required
AND region = '{{ region }}' --required
AND AbacStatus = '{{ AbacStatus }}' --required
AND `Content-MD5` = '{{ Content-MD5}}'
AND `x-amz-sdk-checksum-algorithm` = '{{ x-amz-sdk-checksum-algorithm}}'
AND `x-amz-expected-bucket-owner` = '{{ x-amz-expected-bucket-owner}}';