landsat-pds bucket policy

landsat-pds-policy.json

{
	"Version": "2012-10-17",
	"Statement": [
		{
			"Effect": "Allow",
			"Principal": {
				"AWS": "arn:aws:iam::000000000000:root"
			},
			"Action": [
				"s3:ListBucket",
				"s3:GetBucketLocation"
			],
			"Resource": "arn:aws:s3:::landsat-pds"
		},
		{
			"Effect": "Allow",
			"Principal": {
				"AWS": "arn:aws:iam::000000000000:root"
			},
			"Action": [
				"s3:GetObject",
				"s3:PutObject"
			],
			"Resource": "arn:aws:s3:::landsat-pds/*"
		}
	]
}

This needs the statement to allow anyone to list and get things from the bucket too. How about this?

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "landsat-pds",
      "Effect": "Allow",
      "Principal": "*",
      "Action": [
        "s3:GetBucketLocation",
        "s3:Get*",
        "s3:List*"
      ],
      "Resource": [
        "arn:aws:s3:::landsat-pds",
        "arn:aws:s3:::landsat-pds/*"
      ]
    },
    {
      "Effect": "Allow",
      "Principal": {
        "AWS": "arn:aws:iam::000000000000:root"
      },
      "Action": [
        "s3:ListBucket",
        "s3:GetBucketLocation"
      ],
      "Resource": "arn:aws:s3:::landsat-pds"
    },
    {
      "Effect": "Allow",
      "Principal": {
        "AWS": "arn:aws:iam::000000000000:root"
      },
      "Action": [
        "s3:GetObject",
        "s3:PutObject"
      ],
      "Resource": "arn:aws:s3:::landsat-pds/*"
    }
  ]
}

Because the first statement allows anyone to list everything and get the bucket location, the second statement might be redundant.

Yeah, I think @jedsundwall 's should work, and you can probably get rid of the last GetObject as well then.

Thanks for the feedback. I was wondering if this removed the public access, thanks for the additional statement.