Create IAM User and Attach a Policy using Boto and JSON

gistfile1.txt

import json, boto

# Connect to IAM with boto
iam = boto.connect_iam(ACCESS_KEY, SECRET_KEY)

# Create user
user_response = iam.create_user('aws-user')

# Create Policy
policy = { 'Version' : '2012-10-17'}
policy['Statement'] = [{'Sid' : 'AwsIamUserPython', 
                        'Effect': 'Allow', 
                        'Action': 's3:*', 
                        'Resource': 'arn:aws:s3:::class-rocks/*'}]
policy_json = json.dumps(policy, indent=2)

iam.put_user_policy('aws-user', 'allow_access_class-rocks', policy_json)

# Generate new access key pair for 'aws-user'
key_response = iam.create_access_key('aws-user')

I also needed to add the bucket itself to the resource list--

 'Resource': ['arn:aws:s3:::class-rocks',
              'arn:aws:s3:::class-rocks/*']

@stormm2138

policy['Statement'][0]['Resource']=['arn:aws:s3:::class-rocks','arn:aws:s3:::class-rocks/*']