A policy template to restrict a user's access to a single bucket.

bucket-policy.json

{
  "Version": "2012-10-17",
  "Statement": [
 {
      "Action": ["s3:GetBucketLocation", "s3:ListAllMyBuckets"],
      "Effect": "Allow",
      "Resource": ["arn:aws:s3:::*"]
   },
    {
      "Action": ["s3:ListBucket"],
      "Effect": "Allow",
      "Resource": ["arn:aws:s3:::test-bucket/*"]
   },
    {
      "Effect": "Allow",
      "Action": ["s3:*"],
      "Resource": ["arn:aws:s3:::test-bucket/*"]
    }
  ]
}