Can we create a S3 access point alias with a predefined prefix

Question

I have a S3 bucket that contains shared information from multiple consumer applications. I am creating a dedicated path (prefix) for each consumer in the S3, and creating a access point with access to that prefix. Is there a way, I can share only the access point alias, without the prefix information, with the consumer? i.e. when the consumer uses the access point alias to put files, can I configure it in such a way that those files will be added to the specific path (prefix) corresponding to that access point?

Sivaraman Selvam · Answer

Hello,

Yes, that's possible using S3 access points.

1. Create a S3 bucket and dedicated prefixes for each consumer application in the bucket, e.g., s3://your-bucket/prefix1/, s3://your-bucket/prefix2/.
2. Create an S3 Access Point(AccessPointA and AccessPointB) for each consumer application and specify the bucket name along with Prefix the application must have access. 
3. Each access point can have its own policy to further ensure that uploads are restricted to the correct prefix. Here’s how you can set this up for Access PointA
```
{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "AllowPutObject",
      "Effect": "Allow",
      "Principal": "*",
      "Action": "s3:PutObject",
      "Resource": "arn:aws:s3:region:account-id:accesspoint/AccessPointA/object/prefix1/*""
    }
  ]
}
```
4. Add the access point policy to the other AccessPointB restricted to dedicated prefix2.
5. Test that the files are uploaded to dedicated prefixes inside the S3 bucket using the respective Access Point alias.

Reference:
https://docs.aws.amazon.com/AmazonS3/latest/userguide/access-points.html

Can we create a S3 access point alias with a predefined prefix

Add your answer

Relevant content