S3 Bucket Policies: Grant AWS CloudTrail access to the Amazon S3 Bucket

My Saved Presets

An S3 Bucket policy grants access to AWS CloudTrail to deliver log files to the S3 bucket.

Missing Parameters

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Principal": {
                "Service": "cloudtrail.amazonaws.com"
            },
            "Action": [
                "s3:GetBucketAcl"
            ],
            "Resource": [
                "arn:aws:s3:::"
            ],
            "Effect": "Allow",
            "Condition": {}
        },
        {
            "Principal": {
                "Service": "cloudtrail.amazonaws.com"
            },
            "Action": [
                "s3:PutObject"
            ],
            "Resource": [
                "arn:aws:s3:::/*"
            ],
            "Effect": "Allow",
            "Condition": {
                "StringEquals": {
                    "s3:x-amz-acl": "bucket-owner-full-control"
                }
            }
        }
    ]
}

* Required field

Loading Library ...

Grant AWS CloudTrail access to the Amazon S3 Bucket

Actions

Customize Template

Policy Parameters