cfExtensions example

cfExtensions.json

{
  ...
  "cfExtensions": {
    "PolicyDocumentStatements": [
      {
        "Action": [
          "s3:Get*",
          "s3:List*",
          "s3:Put*"
        ],
        "Resource": [
          {
            "Fn::Join": [
              "",
              [
                "arn:aws:s3:::",
                {
                  "Ref": "aaProjectName"
                },
                "-images.",
                {
                  "Ref": "aaHostedZoneName"
                },
                "/",
                {
                  "Ref": "aaDataModelPrefix"
                },
                "*"
              ]
            ]
          }
        ],
        "Effect": "Allow"
      }
    ],
    "ResourceStatements": {
      "imagesBucket": {
        "Type": "AWS::S3::Bucket",
        "DeletionPolicy": "Delete",
        "Properties": {
          "BucketName": {
            "Fn::Join": [
              "",
              [
                {
                  "Ref": "aaProjectName"
                },
                "-images.",
                {
                  "Ref": "aaHostedZoneName"
                }
              ]
            ]
          },
          "AccessControl": "PublicRead"
        }
      }
    }
  }
}