cloudformation-for-arq-backup.json

{
  "AWSTemplateFormatVersion": "2010-09-09",
  "Description": "Philip's Arq backups",
  "Resources": {
    "S3Bucket": {
      "Type": "AWS::S3::Bucket",
      "Properties": {
        "BucketName": "pmw-backups-arq"
      }
    },
    "ArqUser": {
      "Type": "AWS::IAM::User",
      "Properties": {
        "Policies": [
          {
            "PolicyName": "S3-bucket-access",
            "PolicyDocument": {
              "Version": "2012-10-17",
              "Statement": [
                {
                  "Effect": "Allow",
                  "Action": [
                    "s3:ListAllMyBuckets"
                  ],
                  "Resource": "*"
                },
                {
                  "Effect": "Allow",
                  "Action": [
                    "s3:*"
                  ],
                  "Resource": {
                    "Fn::Sub": "arn:aws:s3:::${S3Bucket}"
                  }
                },
                {
                  "Effect": "Allow",
                  "Action": [
                    "s3:*"
                  ],
                  "Resource": {
                    "Fn::Sub": "arn:aws:s3:::${S3Bucket}/*"
                  }
                }
              ]
            }
          }
        ]
      }
    }
  }
}