Policy

gistfile1.txt

{
						  "Version": "2016-10-17",
						  "Statement": [
						    {
						    "Effect":"Allow",
						    "Action":[
						    	"s3:*"
						    ],
						    "Resource":[
						      "arn:aws:s3:::bucket",
						      "arn:aws:s3:::bucket/*" 
						      ] 
						    },
						    {
						      "Effect": "Deny",
						      "Action": [
						        "s3:*"
						      ],
						      "NotResource": [
						        "arn:aws:s3:::bucket",
						        "arn:aws:s3:::bucket/*"
						      ]
						    }
						  ]
						}