S3:GetObject

aws s3api put-bucket-notification-configuration

PutBucketNotificationConfiguration
s3:ListBucket

select userIdentity.arn as user,
   element_at(requestParameters, 'bucketName') as bucket,
   element_at(requestParameters, 'key') as key,
   count(*) as attempts
from xxxxx-yyyyy-xxxxx-zzzz-xxxxx
where eventSource = 's3.amazonaws.com'
   and eventName = 'GetObject'
   and userIdentity.arn = 'arn:aws:sts::0987654321:assumed-role/your-role/[email protected]'
group by 1,
   2,
   3
order by attempts desc

See also

• s3:, s3:ListBucket, s3:ListAllMyBuckets, s3:PutObject, s3:PutObjectAcl, s3:GetObject, s3:GetObjectAcl , s3:GetBucketPolicy, s3:PutBucketPolicy, s3:DeleteObject, s3:ReplicateObject, s3:ReplicateDelete, s3:ReplicateTags
• aws s3api put-bucket-notification-configuration

https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetObjectAcl.html