SourceAmazon S3 adds additional policy details to access denied error messages
Developers can resolve permission issues faster because they no longer need to manually inspect multiple policies to find the root cause of an access denial.
- Includes specific AWS IAM and AWS Organizations policy ARNs in HTTP 403 Access Denied error messages
- Applies to same-account and same-organization requests
- Covers Service Control Policies (SCPs), Resource Control Policies (RCPs), identity-based policies, session policies, and permission boundaries for explicit deny cases
- Available in all AWS Regions including AWS GovCloud (US) Regions and AWS China Regions