Skip to content

Instantly share code, notes, and snippets.

@phlipper
Created October 5, 2014 22:32
Show Gist options
  • Save phlipper/747dfbf599fa3ac35e70 to your computer and use it in GitHub Desktop.
Save phlipper/747dfbf599fa3ac35e70 to your computer and use it in GitHub Desktop.
Monosnap Custom S3 Bucket - IAM Policy
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowGroupToSeeBucketListInTheConsole",
"Action": [
"s3:ListAllMyBuckets",
"s3:GetBucketLocation"
],
"Effect": "Allow",
"Resource": [
"arn:aws:s3:::*"
]
},
{
"Sid": "AllowRootLevelListingOfTheBucket",
"Action": [
"s3:ListBucket"
],
"Effect": "Allow",
"Resource": [
"arn:aws:s3:::my-monosnap-s3-bucket"
]
},
{
"Sid": "Stmt1410750108000",
"Effect": "Allow",
"Action": [
"s3:GetObjectAcl",
"s3:GetObject",
"s3:GetObjectVersionAcl",
"s3:GetObjectVersion",
"s3:ListBucket",
"s3:PutObjectAcl",
"s3:PutObject",
"s3:PutObjectVersionAcl"
],
"Resource": [
"arn:aws:s3:::my-monosnap-s3-bucket/*"
]
}
]
}
@oneumyvakin
Copy link

I'm right understand that Full S3 access policy means full access to any bucket in S3?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment