What problem does it solve? Listing millions of S3 objects with raw APIs like list-objects-v2 is slow and cannot answer audit questions such as who uploaded or deleted an object. This Skill queries S3 Metadata system tables (journal, inventory, annotation) and S3 Storage Lens tables through Amazon Athena, turning bucket-wide questions into fast SQL queries. ## Core Features & Use Cases - Bucket Auditing: Track recent uploads, deletions, and annotation events with requester and source IP details from the journal table. - Inventory Analysis: Count objects, break down storage classes, and find objects by tag or user metadata using the inventory table. - Annotation Search: Search annotation payloads with LIKE or json_extract_scalar across the annotation table. - Storage Lens Metrics: Analyze per-bucket storage distribution and GET/PUT/DELETE activity metrics. - Setup Guidance: Enable S3 Metadata configurations, register the S3 Tables federated catalog in Glue, and apply least-privilege IAM policies. - Use Case: A security engineer asks who deleted objects from a production bucket in the last 24 hours; the Skill runs a journal table query filtering record_type = 'DELETE' and returns keys, timestamps, requesters, and source IPs. ## Quick Start Ask the assistant to show all objects deleted from your S3 bucket in the last 24 hours, providing the bucket name and AWS region.
