Skip to content

Instantly share code, notes, and snippets.

Show Gist options
  • Save Kr00lIX/c01050e31ef797ca444d92b94db92ee6 to your computer and use it in GitHub Desktop.
Save Kr00lIX/c01050e31ef797ca444d92b94db92ee6 to your computer and use it in GitHub Desktop.
Minimal AWS IAM policy for ARQ.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "0",
"Effect": "Allow",
"Action": ["s3:ListAllMyBuckets", "s3:ListObjects"],
"Resource": "*"
},
{
"Sid": "1",
"Effect": "Allow",
"Action": [
"s3:ListBucket",
"s3:Get*",
"s3:PutObject",
"s3:PutObjectTagging",
"s3:PutObjectVersionTagging",
"s3:AbortMultipartUpload",
"s3:PutLifecycleConfiguration",
"s3:RestoreObject",
"s3:DeleteObject",
"s3:DeleteObjectTagging",
"s3:DeleteObjectVersion",
"s3:DeleteObjectVersionTagging"
],
"Resource": [
"arn:aws:s3:::mcculloch-backup-gigantor-arq-us-west-1/*",
"arn:aws:s3:::mcculloch-backup-gigantor-arq-ap-southeast-2/*",
"arn:aws:s3:::mcculloch-backup-gigantor-arq-us-west-1",
"arn:aws:s3:::mcculloch-backup-gigantor-arq-ap-southeast-2"
]
}
]
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment