GetAccessPointPolicyForObjectLambda - Amazon Simple Storage Service
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).



This operation is not supported by directory buckets.

Returns the resource policy for an Object Lambda Access Point.

The following actions are related to GetAccessPointPolicyForObjectLambda:

Request Syntax

GET /v20180820/accesspointforobjectlambda/name/policy HTTP/1.1 Host: x-amz-account-id: AccountId

URI Request Parameters

The request uses the following URI parameters.


The name of the Object Lambda Access Point.

Length Constraints: Minimum length of 3. Maximum length of 45.

Pattern: ^[a-z0-9]([a-z0-9\-]*[a-z0-9])?$

Required: Yes


The account ID for the account that owns the specified Object Lambda Access Point.

Length Constraints: Maximum length of 64.

Pattern: ^\d{12}$

Required: Yes

Request Body

The request does not have a request body.

Response Syntax

HTTP/1.1 200 <?xml version="1.0" encoding="UTF-8"?> <GetAccessPointPolicyForObjectLambdaResult> <Policy>string</Policy> </GetAccessPointPolicyForObjectLambdaResult>

Response Elements

If the action is successful, the service sends back an HTTP 200 response.

The following data is returned in XML format by the service.


Root level tag for the GetAccessPointPolicyForObjectLambdaResult parameters.

Required: Yes


Object Lambda Access Point resource policy document.

Type: String


Sample resource policy

The following illustrates a sample resource policy.

{ "Version" : "2008-10-17", "Statement":[{ "Sid": "Grant account 123456789012 GetObject access", "Effect":"Allow", "Principal" : { "AWS": "arn:aws:iam::123456789012:root" }, "Action":["s3-object-lambda:GetObject"], "Resource":["arn:aws:s3-object-lambda:us-east-1:123456789012:accesspoint/my-object-lambda-ap"] }, { "Sid": "Grant account 444455556666 GetObject access", "Effect":"Allow", "Principal" : { "AWS": "arn:aws:iam::444455556666:root" }, "Action":["s3-object-lambda:GetObject"], "Resource":["arn:aws:s3-object-lambda:us-east-1:123456789012:accesspoint/my-object-lambda-ap"] } ] }

See Also

For more information about using this API in one of the language-specific Amazon SDKs, see the following: