[Gary MichaelSupport Manager]

Hi Martin,

I see that adding the tagging parameter is causing an Access Denied error. This likely has to do with your bucket policy. You may need to add some additional permissions for your use case. Try replacing the Actions of your policy with this:

"Action": [
   "s3:DeleteObject",
   "s3:PutObjectAcl",
   "s3:GetObject",
   "s3:GetObjectVersion",
   "s3:GetBucketVersioning",
   "s3:GetObjectTagging",
   "s3:GetObjectVersionTagging",
   "s3:PutObject",
   "s3:PutObjectTagging",
   "s3:PutObjectVersionTagging",
   "s3:ListBucket",
   "s3:ListBucketVersions"
]

Here’s a link that may help further clarify: https://stackoverflow.com/questions/53172686/aws-s3-putobjecttagging-fails-with-accessdenied-in-node-js-lambda-function