You can set up access to an Amazon S3 bucket using either of two methods:
Supported regions
Storage Transfer Service supports the following Amazon S3 regions:
af-south-1
ap-east-1
ap-east-2
ap-northeast-1
ap-northeast-2
ap-northeast-3
ap-south-1
ap-south-2
ap-southeast-1
ap-southeast-2
|
ap-southeast-3
ap-southeast-4
ap-southeast-5
ca-central-1
ca-west-1
eu-central-1
eu-central-2
eu-north-1
eu-south-1
eu-south-2
|
eu-west-1
eu-west-2
eu-west-3
il-central-1
me-central-1
me-south-1
sa-east-1
|
us-east-1
us-east-2
us-west-1
us-west-2
us-gov-east-1
us-gov-west-1
|
Transfers using the Google-managed private network support the following AWS regions:
ap-east-1
ap-northeast-1
ap-northeast-2
ap-northeast-3
ap-south-1
ap-south-2
ap-southeast-1
ca-central-1
ca-west-1
eu-central-1
eu-central-2
|
eu-north-1
eu-south-1
eu-south-2
eu-west-1
eu-west-2
eu-west-3
us-east-1
us-east-2
us-west-1
us-west-2
|
|
Required permissions
In order to use Storage Transfer Service to move data from an Amazon S3
bucket, your user account or federated identity role must have the appropriate
permissions for the bucket:
| Permission |
Description |
Use |
s3:ListBucket |
Allows Storage Transfer Service to list objects in the bucket. |
Always required. |
s3:GetObject |
Allows Storage Transfer Service to read objects in the bucket. |
Required if you are transferring the current version of all objects. If your manifest specifies an object version, use s3:GetObjectVersion instead. |
s3:GetObjectVersion |
Allows Storage Transfer Service to read specific versions of objects in the bucket. |
Required if your manifest specifies an object version. Otherwise, use s3:GetObject. |
|
