Amazon S3 Access Grants introduce the ListCallerAccessGrants API

This article introduces the new ListCallerAccessGrants API for Amazon S3 Access Grants, which allows IAM principals and AWS IAM Identity Center end users to list all S3 buckets, prefixes, and objects they can access based on their S3 Access Grants.

Specifically, the article covers:

• The ListCallerAccessGrants API allows applications to identify and take action on data accessible to specific end users
• The Storage Browser for Amazon S3 uses this API to present end users with the data they have access to in S3
• When calling ListCallerAccessGrants, S3 identifies the IAM principal or IAM Identity Center user and their associated groups, and returns the S3 Access Grants for the end user and their groups
• The API is available in all AWS Regions where AWS IAM Identity Center is available
• Provides information on pricing and links to documentation for further details