Managing access to shared datasets with access points

Amazon S3 access points simplify data access for any AWS service or customer application that stores data in S3. Access points are named network endpoints that are attached to a data source such as a bucket or Amazon FSx for OpenZFS volume. For information about working with buckets, see General purpose buckets overview. For information about working with FSx for OpenZFS, see What is Amazon FSx for OpenZFS in the OpenZFS User Guide.

You can use access points to perform S3 object operations, such as GetObject and PutObject. Each access point has distinct permissions and network controls that S3 applies for any request that is made through that access point. Each endpoint enforces a customized access point policy that allow you to control use by resource, user, or other conditions. If your access point is attached to a bucket the access point policy works in conjunction with the underlying bucket policy. You can configure any access point to accept requests only from a virtual private cloud (VPC) to restrict Amazon S3 data access to a private network. You can also configure custom block public access settings for each access point.

The topics in this section explain how to work with Amazon S3 access points. For topics on using access points with directory buckets see, Managing access to shared datasets in directory buckets with access points.