Exact S3 Permissions to allow a flink job to use s3 for checkpointing

[Thomas Wang]

Hi,

I'm trying to figure out what exact s3 permissions does a flink job need to
work appropriately when using s3 for checkpointing. Currently, I have the
following IAM Policy, but it seems insufficient. Can anyone help me figure
this out? Thanks.

{
Action = [
"s3:PutObject",
"s3:GetObject",
]
Effect = "Allow"
Resource = "arn:aws:s3:::<BUCKET_NAME>/<SOME_PATH>/*"
},

Thomas