AWS S3 security considerations
Permit the following actions for the bucket:
Permitted actions |
|---|
s3:HeadBucket |
The following is an example of a JSON policy:
{
"Action": [
"s3:PutObject",
"s3:GetObject",
"s3:ListBucketVersions",
"s3:ListBucket",
"s3:DeleteObject",
"s3:GetBucketLocation"
],
"Resource": [
"arn:aws:s3:::",
"arn:aws:s3:::/model9/*",
"arn:aws:s3:::/agents/*"
],
"Sid": "ObjectAccess",
"Effect": "Allow"
},
{
"Action": "s3:HeadBucket",
"Resource": "*",
"Sid": "BucketAccess",
"Effect": "Allow"
}
"Action": [
"s3:PutObject",
"s3:GetObject",
"s3:ListBucketVersions",
"s3:ListBucket",
"s3:DeleteObject",
"s3:GetBucketLocation"
],
"Resource": [
"arn:aws:s3:::",
"arn:aws:s3:::/model9/*",
"arn:aws:s3:::/agents/*"
],
"Sid": "ObjectAccess",
"Effect": "Allow"
},
{
"Action": "s3:HeadBucket",
"Resource": "*",
"Sid": "BucketAccess",
"Effect": "Allow"
}
Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*