Created
October 10, 2016 17:53
-
-
Save simonw/3c7f91c75dfd0c7e22935b45b210b416 to your computer and use it in GitHub Desktop.
Amazon S3 policy document for allowing a specific user read-only access to a specific S3 bucket
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| { | |
| "Version":"2012-10-17", | |
| "Statement":[ | |
| { | |
| "Effect":"Allow", | |
| "Action":[ | |
| "s3:ListBucket", | |
| "s3:GetBucketLocation" | |
| ], | |
| "Resource":"arn:aws:s3:::specific-s3-bucket" | |
| }, | |
| { | |
| "Effect":"Allow", | |
| "Action":[ | |
| "s3:GetObject", | |
| ], | |
| "Resource":"arn:aws:s3:::specific-s3-bucket/*" | |
| } | |
| ] | |
| } |
Author
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Note that since the user doesn't have the ability to list all buckets against a specific account, they will need to attach to the specific bucket rather than attempting to browse for it first.
In Transmit, that looks like this: