S3 metrics tab permissions

Question

Morning, I am looking to give a user access to the metrics tab of an S3 bucket.  He has the following policy;

```
{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "VisualEditor0",
            "Effect": "Allow",
            "Action": [
                "s3:*"
            ],
            "Resource": [
                "arn:aws:s3:::bucket",
                "arn:aws:s3:::bucket/*"
            ]
        }
    ]
}
```
Now he can get to the S3 bucket with the URL in the console, but when the metrics tab is clicked, it does nothing.  The user wants to get the size and number of directories inside each of the top level folders.  I can probably do a custom metric, but just curious on why the metrics tab doesn't work and am I on the right track for those values.

Accepted Answer

Objects and metrics cannot be viewed without the following policies.  
https://docs.aws.amazon.com/ja_jp/service-authorization/latest/reference/list_amazons3.html  
```
{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "VisualEditor0",
            "Effect": "Allow",
            "Action": [
                "s3:*"
            ],
            "Resource": [
                "arn:aws:s3:::bucket",
                "arn:aws:s3:::bucket/*"
            ]
        },
        {
            "Sid": "List",
            "Effect": "Allow",
            "Action": "s3:ListAllMyBuckets",
            "Resource": "*"
        },
        {
            "Sid": "CloudWatch",
            "Effect": "Allow",
            "Action": [
                "cloudwatch:ListMetrics",
                "cloudwatch:GetMetricStatistics"
            ],
            "Resource": "*"
        }
    ]
}
```

S3 metrics tab permissions

Relevant content