---
type: resource-type
title: S3ExpressAccessPoint
description: aws resource type AWS::S3Express::AccessPoint
name: S3ExpressAccessPoint
lexicon: aws
resource_type: AWS::S3Express::AccessPoint
---
`AWS::S3Express::AccessPoint`, a resource type of the aws lexicon.

## Properties

- `Bucket` (`string`, required): The name of the bucket that you want to associate this Access Point with.
- `Arn` (`string`, optional): The Amazon Resource Name (ARN) of the specified accesspoint.
- `BucketAccountId` (`string`, optional): The AWS account ID associated with the S3 bucket associated with this access point.
- `Name` (`string`, optional): The name you want to assign to this Access Point. If you don't specify a name, AWS CloudFormation generates a unique ID and uses that ID for the access point name. For directory buckets, the access point name must consist of a base name that you provide and suffix that includes the ZoneID (AWS Availability Zone or Local Zone) of your bucket location, followed by --xa-s3.
- `NetworkOrigin` (`"Internet" | "VPC"`, optional): Indicates whether this Access Point allows access from the public Internet. If VpcConfiguration is specified for this Access Point, then NetworkOrigin is VPC, and the Access Point doesn't allow access from the public Internet. Otherwise, NetworkOrigin is Internet, and the Access Point allows access from the public Internet, subject to the Access Point and bucket access policies.
- `Policy` (`Record<string, unknown>`, optional): The Access Point Policy you want to apply to this access point.
- `PublicAccessBlockConfiguration` (`S3ExpressAccessPoint_PublicAccessBlockConfiguration`, optional): The PublicAccessBlock configuration that you want to apply to this Access Point.
- `Scope` (`S3ExpressAccessPoint_Scope`, optional): For directory buckets, you can filter access control to specific prefixes, API operations, or a combination of both.
- `Tags` (`S3ExpressAccessPoint_Tag[]`, optional)
- `VpcConfiguration` (`S3ExpressAccessPoint_VpcConfiguration`, optional): If you include this field, Amazon S3 restricts access to this Access Point to requests from the specified Virtual Private Cloud (VPC).

## Attributes

- `Arn`
- `NetworkOrigin`