SECURITY

Amazon S3 policy editor

Create IAM policies for multiple Amazon S3 buckets with shared or individual permissions. Bucket policies apply to one bucket each.

Policy type

S3 buckets

Bucket names must be unique.

Permissions

Same for all Customize per bucket

One shared statement includes the resources of all buckets.

Effect

Allow Deny

Resources

Bucket itself Objects in bucket

Bucket actions and object actions require different resource ARNs.

Object prefixes (optional)

Limits object access to keys below these prefixes, e.g. "logs/" becomes bucket/logs/*. Leave empty for all objects.

Actions

All S3 actions (s3:*) Individual actions

Policy JSON

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "s3:*"
      ],
      "Resource": [
        "arn:aws:s3:::example-bucket/*"
      ]
    }
  ]
}

The policy is generated in your browser and is never transmitted.