# Scope
<a name="API_control_Scope"></a>

You can use the access point scope to restrict access to specific prefixes, API operations, or a combination of both.

For more information, see [Manage the scope of your access points for directory buckets](https://docs.amazonaws.cn/AmazonS3/latest/userguide/access-points-directory-buckets-manage-scope.html).

## Contents
<a name="API_control_Scope_Contents"></a>

 ** Permissions **   <a name="AmazonS3-Type-control_Scope-Permissions"></a>
You can include one or more API operations as permissions.  
Type: Array of strings  
Valid Values: `GetObject | GetObjectAttributes | ListMultipartUploadParts | ListBucket | ListBucketMultipartUploads | PutObject | DeleteObject | AbortMultipartUpload`   
Required: No

 ** Prefixes **   <a name="AmazonS3-Type-control_Scope-Prefixes"></a>
You can specify any amount of prefixes, but the total length of characters of all prefixes must be less than 256 bytes in size.  
Type: Array of strings  
Required: No

## See Also
<a name="API_control_Scope_SeeAlso"></a>

For more information about using this API in one of the language-specific Amazon SDKs, see the following:
+  [Amazon SDK for C\$1\$1](https://docs.amazonaws.cn/goto/SdkForCpp/s3control-2018-08-20/Scope) 
+  [Amazon SDK for Java V2](https://docs.amazonaws.cn/goto/SdkForJavaV2/s3control-2018-08-20/Scope) 
+  [Amazon SDK for Ruby V3](https://docs.amazonaws.cn/goto/SdkForRubyV3/s3control-2018-08-20/Scope)