S3 Bucket Policies: Restrict Access to S3 Bucket to a Specific VPC Endpoint

My Saved Presets

An S3 Bucket policy that denies all access to the bucket if the specified VPC endpoint is not being used to access the S3 bucket.

Missing Parameters

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Principal": "*",
            "Action": "s3:*",
            "Resource": [
                "arn:aws:s3:::/*",
                "arn:aws:s3:::"
            ],
            "Effect": "Deny",
            "Condition": {
                "StringNotEquals": {
                    "aws:sourceVpce": ""
                }
            }
        }
    ]
}

* Required field

Loading Library ...

Restrict Access to S3 Bucket to a Specific VPC Endpoint

Actions

Customize Template

Policy Parameters