Minimum rights policy for S3 that works just fine with CarrierWave/Fog

minimum_rights_policy.json

{
    "Statement": [
        {
            "Effect": "Allow",
            "Action": ["s3:ListBucket" ],
            "Resource": [ "arn:aws:s3:::BUCKETNAME" ]
        },
        {
            "Effect": "Allow",
            "Action": [ "s3:PutObject", "s3:GetObject", "s3:DeleteObject"],
            "Resource": [ "arn:aws:s3:::BUCKETNAME/*" ]
        }
    ]
}

@clemens I think you're missing one action in your example. I forked your example and added it: https://gist.github.com/etagwerker/6ebbad7018b23c3b9cb33e45b56a9b7f