S3 Bucket Policies: Restrict Access to Specific IAM Users

My Saved Presets

An S3 Bucket policy that grants permissions to specific IAM users to perform any Amazon S3 operations on objects in the specified bucket, and denies all other IAM principals.

To restrict access to IAM roles, use this S3 bucket policy.

Missing Parameters

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Principal": {
                "AWS": [
                    ""
                ]
            },
            "Action": "s3:*",
            "Resource": [
                "arn:aws:s3:::/*",
                "arn:aws:s3:::"
            ],
            "Effect": "Allow"
        },
        {
            "NotPrincipal": {
                "AWS": [
                    ""
                ]
            },
            "Action": "s3:*",
            "Resource": [
                "arn:aws:s3:::/*",
                "arn:aws:s3:::"
            ],
            "Effect": "Deny"
        }
    ]
}

* Required field

Loading Library ...

Restrict Access to Specific IAM Users

Actions

Customize Template

Policy Parameters