S3 Bucket Policy - Configure Bucket Level Permissions - aws-iam Cheatsheets

Use this tool to configure S3 bucket-level permissions. Define access policies for your AWS S3 buckets using JSON format. Ensure secure and controlled access to your data stored in Amazon S3.

Example Bucket Policy

Below is an example of a bucket policy that grants permissions for common S3 operations like PutObject, GetObject, and DeleteObject.

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "BucketLevelAccess",
            "Effect": "Allow",
            "Action": [
                "s3:PutObject",
                "s3:GetObject",
                "s3:AbortMultipartUpload",
                "s3:DeleteObjectVersion",
                "s3:ListBucket",
                "s3:DeleteObject"
            ],
            "Resource": [
                "arn:aws:s3:::my-s3-bucket",
                "arn:aws:s3:::my-s3-bucket/*"
            ]
        }
    ]
}

Understanding the Policy

This policy allows specified actions on the bucket my-s3-bucket and its contents. Modify the Resource and Action fields to fit your specific requirements. Refer to the AWS S3 documentation for more details.

Key Elements

Version: Specifies the version of the policy language.
Statement: An array of individual statements, each defining a specific permission.
Sid: A statement identifier.
Effect: Whether the statement allows or denies access.
Action: The S3 actions that are allowed or denied.
Resource: The S3 bucket or objects to which the policy applies.

Additional Resources

For more information on AWS IAM policies and S3 bucket permissions, consult the following resources: