Whats the difference in AWS policies when * is at the end of the action and when there is no *(star):

"s3:PutObject*"  
    

vs.

"s3:PutObject"

CodePudding user response：

The first one matches the actions s3:PutObject as well as s3:PutObjectAcl, s3:PutObjectLegalHold, basically logically speaking s3:PutObject...Anything or for short s3:PutObject*.

See https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazons3.html for a full list.

The second one only matches s3:PutObject, nothing more, nothing less.