From 38e5871c3bc42da13057cfcb015bf49c6308c4dd Mon Sep 17 00:00:00 2001
From: chrislu <chris.lu@gmail.com>
Date: Tue, 9 Dec 2025 07:54:14 -0800
Subject: [PATCH] Fix HeadObject action name in docs for consistency

Change 'HeadObject' to 's3:HeadObject' to match other action names.
---
 weed/s3api/policy_engine/README_POLICY_ENGINE.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/weed/s3api/policy_engine/README_POLICY_ENGINE.md b/weed/s3api/policy_engine/README_POLICY_ENGINE.md
index ddd872cfd..9a5ab3b3c 100644
--- a/weed/s3api/policy_engine/README_POLICY_ENGINE.md
+++ b/weed/s3api/policy_engine/README_POLICY_ENGINE.md
@@ -195,7 +195,7 @@ This allows anonymous access only to objects that have a tag `status=public`.
 Tag-based conditions (`s3:ExistingObjectTag/<key>`) are evaluated for the following operations:
 - `s3:GetObject` (GET object)
 - `s3:GetObjectVersion` (GET object with versionId)
-- `HeadObject` (HEAD object)
+- `s3:HeadObject` (HEAD object)
 
 Note: For these conditions to be evaluated, the object must exist and the policy engine re-checks access after fetching the object metadata.