# PolicyDocument

AWS IAM-compatible policy document.
See [IAM Policies documentation](/content/docs/iam/policies/index.html) for details.

**Version** string required

Policy language version.

**Possible values:** [`2012-10-17`]

**Statement** object[] required

Array [  
  
**Sid** string

Optional identifier for the statement  
  
**Effect** string required

Whether this statement allows or denies the specified actions  
  
**Possible values:** [`Allow`, `Deny`]  
  
**Action** string[] required

S3 actions to allow or deny. Common actions: `s3:GetObject`, `s3:PutObject`, `s3:DeleteObject`, `s3:ListBucket`, `s3:*`.  
See [supported actions](/content/docs/iam/policies/supported-actions/index.html).  
  
**Resource** string[] required

S3 resource ARNs. Use `arn:aws:s3:::bucket` for bucket-level and `arn:aws:s3:::bucket/prefix/*` for prefix-scoped access.  
  
**Condition** object

Optional conditions (IP, time-based).  
See [condition examples](/content/docs/iam/policies/examples/ip-restrictions/index.html).  
  
]

PolicyDocument

```json
{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "string",
      "Effect": "Allow",
      "Action": [
        "string"
      ],
      "Resource": [
        "string"
      ],
      "Condition": {}
    }
  ] 
}
```