anryko

AWS S3 bucket and IAM policy recipes

• Anonymous GET access
• Anonymous GET access - match HTTP referrer
• Full access for specific IAM user/role
• GET/PUT/DELETE access to specific path within a bucket
• Restricted LIST & PUT/DELETE access to specific path within a bucket
• Full access (and S3 console) for specific IAM users
• Reference

Anonymous GET access

anryko

iptables -t filter -I OUTPUT -d 169.254.169.254 -j EC2
iptables -N EC2
iptables -A EC2 -m owner --uid-owner root -d 169.254.169.254 -j ACCEPT
iptables -A EC2 -j REJECT --reject-with icmp-host-unreachable