vpc_s3enpoint_policy.json

vpc_s3enpoint_policy.json

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Principal": "*",
            "Action": "s3:List*",
            "Resource": "arn:aws:s3:::*"
        },
        {
            "Effect": "Allow",
            "Principal": "*",
            "Action": "s3:*",
            "Resource": [
                "arn:aws:s3:::<허용할 버킷>",
                "arn:aws:s3:::<허용할 버킷>/*"
            ]
        },
        {
            "Effect": "Deny",
            "Principal": "*",
            "Action": "s3:*",
            "Resource": [
                "arn:aws:s3:::<제한할 버킷>",
                "arn:aws:s3:::<제한할 버킷>/*"
            ]
        }
    ]
}