Amazon S3 now includes specific IAM and AWS Organizations policy ARNs in HTTP 403 Access Denied error messages for same-account and same-organization requests.

Key Details

• Includes specific AWS IAM and AWS Organizations policy ARNs in HTTP 403 Access Denied error messages
• Applies to same-account and same-organization requests
• Covers Service Control Policies (SCPs), Resource Control Policies (RCPs), identity-based policies, session policies, and permission boundaries for explicit deny cases
• Available in all AWS Regions including AWS GovCloud (US) Regions and AWS China Regions

In This Story