Amazon S3 Access Grants now supports a ListCallerAccessGrants call that can pull grants from every AWS account that shares access with you. By setting the InstanceScope parameter to ALL, the single request returns grants from your own instance and any others shared through AWS Resource Access Manager. The same option works with GetDataAccess, automatically routing the request to the owning account and returning the needed credentials. The feature is live in every region where S3 Access Grants runs and carries no extra charge.
Why it matters
It lets administrators see all shared S3 permissions in one view, simplifying multi‑account data governance.
