By Implementation
By Service Protected
Configuration Packages
Strategy Guides
Other
By Service Protected
By Implementation
Service Control Policies
Config Rules
Auto Remediation Rules
Conformance Packs
Amazon GuardDuty
Amazon Inspector
AWS Security Hub
AWS Network Firewall
Route53 Resolver Security
Amazon Macie
S3 Bucket Policies
CloudWatch Alarms and Event Rules
AWS WAF
AWS Secrets Manager
AWS Systems Manager
Security Groups & NACLs
AWS KMS
IAM PoliciesConfiguration Packages
Strategy Guides
Other
S3 Bucket Policies
Restrict Access to Specific IAM Role
An S3 Bucket policy that grants permissions to a specific IAM role to perform any Amazon S3 operations on objects in the specified bucket, and denies all other IAM principals.
This policy requires the Unique IAM Role Identifier which can be found using the steps in this blog post.
AWS Blog Post: How to Restrict Amazon S3 Bucket Access to a Specific IAM RoleMissing Parameters
{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Action": "s3:*",
"Resource": [
"arn:aws:s3:::/*",
"arn:aws:s3:::"
],
"Condition": {
"StringLike": {
"aws:userId": [
":*",
""
]
}
}
},
{
"Effect": "Deny",
"Action": "s3:*",
"Resource": [
"arn:aws:s3:::/*",
"arn:aws:s3:::"
],
"Condition": {
"StringNotLike": {
"aws:userId": [
":*",
""
]
}
}
}
]
}Actions
Customize Template
* Required field