PolicyStatement

A permission statement within a policy document.

Sid string

Optional identifier for the statement

Effect string required

Whether this statement allows or denies the specified actions

Possible values: [Allow, Deny]

Action string[] required

S3 actions to allow or deny. Common actions: s3:GetObject, s3:PutObject, s3:DeleteObject, s3:ListBucket, s3:*. See supported actions.

Resource string[] required

S3 resource ARNs. Use arn:aws:s3:::bucket for bucket-level and arn:aws:s3:::bucket/prefix/* for prefix-scoped access.

Condition object

Optional conditions (IP, time-based). See condition examples.

PolicyStatement

{

"Sid": "string",

"Effect": "Allow",

"Action": [

"string"

],

"Resource": [

"string"

],

"Condition": {}

}