aws / aws/aws-cli

Support S3 Access Grants

Open
#9,111 2 comments 4 reactions 0 assignees View on GitHub
feature-request p2 s3
Dominant language
Python
Stars
17.3k
Forks
4.6k
Avg merge
1d 2h
Merged PRs (30d)
13

Description

### Describe the feature

Seamlessly integrate S3 access grants, by requesting data access under the hood when operating on doing AWS S3 CLI operations

### Use Case

S3 access grants are supported in most SDKs via a plugin ([python example](https://github.com/aws/boto3-s3-access-grants-plugin))

For now, CLI users need to do a two step process to access data managed by S3 access grants; citing documentation:
- [request access](https://docs.aws.amazon.com/AmazonS3/latest/userguide/access-grants-credentials.html)
- then [access the data using the obtained temporary credentials](https://docs.aws.amazon.com/AmazonS3/latest/userguide/access-grants-get-data.html))

Integrating a similar plugin would be very useful; deleting an object managed by S3 access grants would become a straightforward `aws s3 rm ...`

### Proposed Solution

This could be activated via an option

### Other Information

_No response_

### Acknowledgements

- [ ] I may be able to implement this feature request
- [ ] This feature might incur a breaking change

### CLI version used

2.15.39

### Environment details (OS name and version, etc.)

macOS Ventura (13.6.9)

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.