Esri
Fully document necessary S3 permissions?
Our AWS environment is managed very strictly via the principle of least privilege, and we use an IAM Role assigned to our EC2 instance for managing content in an S3 bucket, which works well for managing bucket contents with the AWS CLI and an ArcGIS Pro Cloud Storage connection. But the OptimizeRasters codebase seems to need some additional privileges, including get-bucket-location (why? ArcGIS Pro and ArcGIS Server prompt the user for the region, why can't OptimizeRasters do the same?), list-buckets (why? we specify the bucket in the tool parameters, why does the code need to list other buckets?), and get-bucket-acl. Would it be possible to include in the documentation a full list of all the required privileges for the tool to run successfully so we don't have to discover them one by one through error messages?
