docs: new S3 access requirements as of v3.4 (argoproj#9557)

.spelling

@@ -38,6 +38,7 @@ Breitgand
 Couler
 DataDog
 Dataflow
+DeleteObject
 DevOps
 Dex
 EtcD
@@ -89,6 +90,7 @@ Ploomber
 Postgres
 Roadmap
 RoleBinding
+s3
 SDKs
 Sharding
 Singer.io

docs/configure-artifact-repository.md

@@ -75,7 +75,8 @@ $ cat > policy.json <<EOF
  "Effect":"Allow",
  "Action":[
  "s3:PutObject",
- "s3:GetObject"
+ "s3:GetObject",
+ "s3:ListBucket"
  ],
  "Resource":"arn:aws:s3:::$mybucket/*"
  }
@@ -88,6 +89,8 @@ $ aws iam put-user-policy --user-name $mybucket-user --policy-name $mybucket-pol
 $ aws iam create-access-key --user-name $mybucket-user > access-key.json
 ```
 
+If you have Artifact Garbage Collection configured, you should also add "s3:DeleteObject" to the list of Actions above.
+
 NOTE: if you want argo to figure out which region your buckets belong in, you
 must additionally set the following statement policy. Otherwise, you must
 specify a bucket region in your workflow configuration.

docs/upgrading.md

@@ -65,6 +65,10 @@ Failed to register watch for controller config map: error unmarshaling JSON: whi
 
 This PR adds indexes to archived workflow tables. This change may cause a long time to upgrade if the user has a large table.
 
+## feat: enhance artifact visualization (#8655)
+
+For AWS users using S3: visualizing artifacts in the UI and downloading them now requires an additional "Action" to be configured in your S3 bucket policy: "ListBucket".
+
 ## Upgrading to v3.3
 
 ### [662a7295b](https://github.com/argoproj/argo-workflows/commit/662a7295b) feat: Replace `patch pod` with `create workflowtaskresult`. Fixes #3961 (#8000)