Default Policy Sentry file

demo.yml

mode: crud
name: ''
# Specify resource ARNs
read:
- 'arn:aws:s3:::example/*'
write:
- 'arn:aws:s3:::example/*'
list:
- 'arn:aws:s3:::example/*'
tagging:
- ''
permissions-management:
- ''
# Actions that do not support resource constraints
wildcard-only:
  single-actions: # standalone actions
  - ''
  # Service-wide - like 's3' or 'ec2'
  service-read:
  - ''
  service-write:
  - ''
  service-list:
  - ''
  service-tagging:
  - ''
  service-permissions-management:
  - ''
# Skip resource constraint requirements by listing actions here.
skip-resource-constraints:
- ''
# Exclude actions from the output by specifying them here. Accepts wildcards, like kms:Delete*
exclude-actions:
- ''