S3: Bucket Policy

May 18, 2023

—

{
  "Version": "2012-10-17",
  "Statement": [{
    "Effect": "Allow",
    "Principal": {"AWS": [
      "arn:aws:iam:::user/<username>",
      "arn:aws:iam:::user:<username>",
      "arn:aws:iam:::<username>"
    ]},
    "Action": "s3:*",
    "Resource": [
      "arn:aws:s3:::<bucket-name>"
      "arn:aws:s3:::<bucket-name>/*"
    ]
  }]
}

JSON
​x
 
{
  "Version": "2012-10-17",
  "Statement": [{
    "Effect": "Allow",
    "Principal": {"AWS": [
      "arn:aws:iam:::user/<username>",
      "arn:aws:iam:::user:<username>",
      "arn:aws:iam:::<username>"
    ]},
    "Action": "s3:*",
    "Resource": [
      "arn:aws:s3:::<bucket-name>"
      "arn:aws:s3:::<bucket-name>/*"
    ]
  }]
}

{
  "Version": "2012-10-17",
  "Statement": [{
    "Effect": "Allow",
    "Principal": {"AWS": [
      "arn:aws:iam:::<username>",
    ]},
    "Action": [
      "s3:ListBucket",
      "s3:GetObject"
    ],
    "Resource": [
      "arn:aws:s3:::<bucket-name>"
    ]
  }]
}

JSON
 
{
  "Version": "2012-10-17",
  "Statement": [{
    "Effect": "Allow",
    "Principal": {"AWS": [
      "arn:aws:iam:::<username>",
    ]},
    "Action": [
      "s3:ListBucket",
      "s3:GetObject"
    ],
    "Resource": [
      "arn:aws:s3:::<bucket-name>"
    ]
  }]
}

{
  "Version": "2012-10-17",
  "Statement": [{
    "Effect": "Allow",
    "Principal": {"AWS": [
      "arn:aws:iam:::user/<username>",
      "arn:aws:iam:::<username>:<sub-username>",
    ]},
    "Action": [
      "s3:GetBucketLocation",
      "s3:GetLifecycleConfiguration",
      "s3:GetBucketPolicy",
      "s3:GetBucketCORS",
      "s3:GetBucketAcl"
    ],
    "Resource": [
      "arn:aws:s3:::<bucket-name>"
    ]
  }]
}

JSON
 
{
  "Version": "2012-10-17",
  "Statement": [{
    "Effect": "Allow",
    "Principal": {"AWS": [
      "arn:aws:iam:::user/<username>",
      "arn:aws:iam:::<username>:<sub-username>",
    ]},
    "Action": [
      "s3:GetBucketLocation",
      "s3:GetLifecycleConfiguration",
      "s3:GetBucketPolicy",
      "s3:GetBucketCORS",
      "s3:GetBucketAcl"
    ],
    "Resource": [
      "arn:aws:s3:::<bucket-name>"
    ]
  }]
}

AWS S3	CEPH / RADOS-GW
AbortMultipartUpload	AbortMultipartUpload
CompleteMultipartUpload
CopyObject
CreateBucket	CreateBucket
CreateMultipartUpload
DeleteBucket	DeleteBucket
DeleteBucketAnalyticsConfiguration
DeleteBucketCors
DeleteBucketEncryption
DeleteBucketIntelligentTieringConfiguration
DeleteBucketInventoryConfiguration
DeleteBucketLifecycle
DeleteBucketMetricsConfiguration
DeleteBucketOwnershipControls
DeleteBucketPolicy	DeleteBucketPolicy
DeleteBucketReplication
	DeleteReplicationConfiguration
DeleteBucketTagging
DeleteBucketWebsite	DeleteBucketWebsite
DeleteObject	DeleteObject
DeleteObjects
DeleteObjectTagging	DeleteObjectTagging
DeletePublicAccessBlock
	DeleteObjectVersion
	DeleteObjectVersionTagging
GetBucketAccelerateConfiguration
GetBucketAcl	GetBucketAcl
GetBucketAnalyticsConfiguration
GetBucketCors	GetBucketCORS
GetBucketEncryption	GetBucketEncryption
GetBucketIntelligentTieringConfiguration
GetBucketInventoryConfiguration
GetBucketLifecycle
GetBucketLifecycleConfiguration
GetBucketLocation	GetBucketLocation
GetBucketLogging	GetBucketLogging
GetBucketMetricsConfiguration
GetBucketNotification	GetBucketNotification
GetBucketNotificationConfiguration
GetBucketOwnershipControls
GetBucketPolicy	GetBucketPolicy
GetBucketPolicyStatus
GetBucketReplication
GetBucketRequestPayment	GetBucketRequestPayment
GetBucketTagging	GetBucketTagging
GetBucketVersioning	GetBucketVersioning
GetBucketWebsite	GetBucketWebsite
GetObject	GetObject
GetObjectAcl	GetObjectAcl
GetObjectAttributes
GetObjectLegalHold	GetObjectLegalHold
GetObjectLockConfiguration
GetObjectRetention	GetObjectRetention
GetObjectTagging	GetObjectTagging
GetObjectTorrent	GetObjectTorrent
GetPublicAccessBlock
	GetObjectVersion
	GetObjectVersionAcl
	GetObjectVersionTagging
	GetObjectVersionTorrent
HeadBucket
HeadObject
	ListAllMyBuckets
ListBucketAnalyticsConfigurations
ListBucketIntelligentTieringConfigurations
ListBucketInventoryConfigurations
ListBucketMetricsConfigurations
	ListBucket
ListBuckets
	ListBucketMultipartUploads
	ListBucketVersions
ListMultipartUploads
	ListMultipartUploadParts
ListObjects
ListObjectsV2
ListObjectVersions
ListParts
	PutAccelerateConfiguration
PutBucketAccelerateConfiguration
PutBucketAcl	PutBucketAcl
PutBucketAnalyticsConfiguration
PutBucketCors	PutBucketCORS
PutBucketEncryption	PutBucketEncryption
PutBucketIntelligentTieringConfiguration
PutBucketInventoryConfiguration
PutBucketLifecycle
PutBucketLifecycleConfiguration
PutBucketLogging	PutBucketLogging
PutBucketMetricsConfiguration
PutBucketNotification	PutBucketNotification
PutBucketNotificationConfiguration
PutBucketOwnershipControls
PutBucketPolicy	PutBucketPolicy
PutBucketReplication
PutBucketRequestPayment	PutBucketRequestPayment
PutBucketTagging	PutBucketTagging
PutBucketVersioning	PutBucketVersioning
PutBucketWebsite	PutBucketWebsite
	PutLifecycleConfiguration
PutObject	PutObject
PutObjectAcl	PutObjectAcl
PutObjectLegalHold	PutObjectLegalHold
PutObjectLockConfiguration
PutObjectRetention	PutObjectRetention
PutObjectTagging	PutObjectTagging
	PutObjectVersionAcl
	PutObjectVersionTagging
	PutReplicationConfiguration
PutPublicAccessBlock
RestoreObject	RestoreObject
SelectObjectContent
UploadPart
UploadPartCopy
WriteGetObjectResponse

References:

S3: Bucket Policy

Comments

Leave a Reply Cancel reply