PolicyDocument

AWS IAM-compatible policy document. See IAM Policies documentation for details.

Version string required

Policy language version.

Possible values: [2012-10-17]

Statement object[] required

Array [

Sid string

Optional identifier for the statement

Effect string required

Whether this statement allows or denies the specified actions

Possible values: [Allow, Deny]

Action string[] required

S3 actions to allow or deny. Common actions: s3:GetObject, s3:PutObject, s3:DeleteObject, s3:ListBucket, s3:*.
See supported actions.

Resource string[] required

S3 resource ARNs. Use arn:aws:s3:::bucket for bucket-level and arn:aws:s3:::bucket/prefix/* for prefix-scoped access.

Condition object

Optional conditions (IP, time-based).
See condition examples.

]

PolicyDocument

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "string",
      "Effect": "Allow",
      "Action": [
        "string"
      ],
      "Resource": [
        "string"
      ],
      "Condition": {}
    }
  ] 
}