Minimum rights policy for S3 that works just fine with CarrierWave/Fog

minimum_rights_policy.json

{
    "Statement": [
        {
            "Effect": "Allow",
            "Action": ["s3:ListBucket" ],
            "Resource": [ "arn:aws:s3:::BUCKETNAME" ]
        },
        {
            "Effect": "Allow",
            "Action": [ "s3:PutObject", "s3:GetObject", "s3:DeleteObject", "s3:PutObjectAcl"],
            "Resource": [ "arn:aws:s3:::BUCKETNAME/*" ]
        }
    ]
}