s3_object_lambda_pii_protection_blog/redaction/s3olap-redaction-foundation.yaml [214:242]:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
        PolicyDocument: 
          Version: '2012-10-17'
          #
          Statement:
          - Sid: AllowListingObjects
            Effect: Allow
            Action: s3:ListBucket
            Resource: "*"
          - Sid: AllowListingBucketsAndAccessPoints
            Effect: Allow
            Action:
            - s3:GetAccessPointForObjectLambda
            - s3:GetAccessPointConfigurationForObjectLambda
            - s3:ListAccessPointsForObjectLambda
            - s3:ListAllMyBuckets
            - s3:ListAccessPoints
            - s3:GetAccessPoint
            - s3:GetAccountPublicAccessBlock
            - s3:GetBucketPublicAccessBlock
            - s3:GetBucketPolicyStatus
            - s3:GetBucketAcl
            - s3:GetAccessPointPolicyStatus
            Resource: "*"
          - Sid: AllowObjectLambdaAccess
            Action:
            - s3-object-lambda:Get*
            - s3-object-lambda:List*
            Effect: Allow
            Resource:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -



s3_object_lambda_pii_protection_blog/redaction/s3olap-redaction-foundation.yaml [274:301]:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
        PolicyDocument: 
          Version: '2012-10-17'
          Statement:
          - Sid: AllowListingObjects
            Effect: Allow
            Action: s3:ListBucket
            Resource: "*"
          - Sid: AllowListingBucketsAndAccessPoints
            Effect: Allow
            Action:
            - s3:GetAccessPointForObjectLambda
            - s3:GetAccessPointConfigurationForObjectLambda
            - s3:ListAccessPointsForObjectLambda
            - s3:ListAllMyBuckets
            - s3:ListAccessPoints
            - s3:GetAccessPoint
            - s3:GetAccountPublicAccessBlock
            - s3:GetBucketPublicAccessBlock
            - s3:GetBucketPolicyStatus
            - s3:GetBucketAcl
            - s3:GetAccessPointPolicyStatus
            Resource: "*"
          - Sid: AllowObjectLambdaAccess
            Action:
            - s3-object-lambda:Get*
            - s3-object-lambda:List*
            Effect: Allow
            Resource:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -



