wal-e encrypted PostgreSQL backups s3 policy

s3_wale_policy.json

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "S3PostgreSQLWALeBackups",
      "Action": [
        "s3:AbortMultipartUpload",
        "s3:DeleteObject",
        "s3:DeleteObjectVersion",
        "s3:GetObject",
        "s3:GetObjectAcl",
        "s3:GetObjectTagging",
        "s3:GetObjectVersion",
        "s3:GetObjectVersionAcl",
        "s3:GetObjectVersionTagging",
        "s3:PutObject",
        "s3:PutObjectAcl",
        "s3:PutObjectTagging",
        "s3:PutObjectVersionAcl",
        "s3:PutObjectVersionTagging"
      ],
      "Effect": "Allow",
      "Resource": "arn:aws:s3:::<S3 BUCKET NAME>/*",
      "Principal": {
        "AWS": [
          "arn:aws:iam::<IAM USERS ID>:user/<IAM USER>"
        ]
      }
    }
  ]
}