Skip to content

Instantly share code, notes, and snippets.

@paulgalow
Last active August 5, 2022 15:56
Show Gist options
  • Save paulgalow/2768b010423a143d0a8df37f0739b967 to your computer and use it in GitHub Desktop.
Save paulgalow/2768b010423a143d0a8df37f0739b967 to your computer and use it in GitHub Desktop.
Least privilege IAM policy for Synology Cloud Sync with Amazon S3 in bi-directional syncing mode. Tested on DSM 6.2.4.
{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Action": [
"s3:GetBucketLocation"
],
"Resource": [
"arn:aws:s3:::*"
]
},
{
"Effect": "Allow",
"Action": [
"s3:ListBucket"
],
"Resource": [
"arn:aws:s3:::bucket-name-here"
]
},
{
"Effect": "Allow",
"Action": [
"s3:PutObject",
"s3:GetObject",
"s3:DeleteObject"
],
"Resource": [
"arn:aws:s3:::bucket-name-here/optional-subfolder/*"
]
}
]
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment