Working with Multi-Region Access Points

This page was generated from content adapted from the AWS Developer Guide

Creating Multi-Region Access Points

• Note For an application or user to be able to access an object through a Multi-Region Access Point, both of the following policies must permit the request: The access policy for the Multi-Region Access Point The access policy for the underlying bucket that contains the object When the two policies are different, the more restrictive policy takes precedence. To simplify permissions management for Multi-Region Access Points, you can delegate access control from the bucket to the Multi-Region Access Point. For more information, see Multi-Region Access Point policy examples.

Using Multi-Region Access Points

• Note The Multi-Region Access Point alias and ARN cannot be used interchangeably.