sqldump

(coffee) => code

IAM Policy for Access to a Single S3 Bucket

Assuming the bucket name is my-bucket

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19

{
  "Statement": [
    {
      "Action": [
        "s3:ListAllMyBuckets"
      ],
      "Effect": "Allow",
      "Resource": "arn:aws:s3:::*"
    },
    {
      "Action": "s3:*",
      "Effect": "Allow",
      "Resource": [
        "arn:aws:s3:::my-bucket", 
        "arn:aws:s3:::my-bucket/*"
      ]
    }
  ]
}

Source: http://andrewhitchcock.org/?post=325