AWS S3 bucket policy recipes Anonymous GET access Anonymous GET access - match HTTP referrer Full access for specific IAM user/role GET/PUT/DELETE access to specific path within a bucket Restricted LIST & PUT/DELETE access to specific path within a bucket Full access (and S3 console) for specific IAM users Reference Anonymous GET access