Support S3 Access Grants

[simon-vdk]

Describe the feature

Seamlessly integrate S3 access grants, by requesting data access under the hood when operating on doing AWS S3 CLI operations

Use Case

S3 access grants are supported in most SDKs via a plugin (python example)

For now, CLI users need to do a two step process to access data managed by S3 access grants; citing documentation:

• request access
• then access the data using the obtained temporary credentials)

Integrating a similar plugin would be very useful; deleting an object managed by S3 access grants would become a straightforward aws s3 rm ...

Proposed Solution

This could be activated via an option

Other Information

No response

Acknowledgements

• I may be able to implement this feature request
• This feature might incur a breaking change

CLI version used

2.15.39

Environment details (OS name and version, etc.)

macOS Ventura (13.6.9)

[tim-finnigan]

Thanks for the feature request. We can track this for further review and others can add a 👍 to the issue to +1 it.

I think this would need to be reviewed at a cross-SDK level in order to determine the feasibility of a consistent implementation. Also you mentioned that "S3 access grants are supported in most SDKs via a plugin", do you have links to plugins for other SDKs? The Python one is the only one I see when searching for repositories.