AWS/S3 Bucket Policies - Revision history

Pio2pio at 14:03, 11 October 2020

2020-10-11T14:03:34Z

@@ Line 1: / Line 1: @@
 Secure S3 bucket and objects using ''S3 bucket policies'', which are written as JSON documents and attached to the bucket we are securing
-:[[File:ClipCapIt-201011-142708.PNG|500px]]
+* S3 policies are '''resource-based''' policies as are attached to a resource eg. S3
 = Working with JSON =
@@ Line 7: / Line 19: @@
 Plugin shows the JSON in a tree format in a separate frame, it also formats JSON in a readable format in the main Notepad++ window. To format a JSON string, paste it into Notepad++ and select it. Then go to <tt>Plugins > JSON Viewer > '''Format JSON''' [Ctrl+Alt+Shift+M]</tt> and it should instantly format it for you, then choose <tt>'''Show JSON Viewer''' [Ctrl+Alt+Shift+J]</tt>
-== Read-only access to certain S3 buckets ==
+= Block Public Access Feature =
 A sample AWS IAM json policy file with read-only access to certain S3 buckets. Formatted by JSON Viewer in NP++
 <syntaxhighlight lang=json>

2020-10-11T13:27:51Z

← Older revision		Revision as of 15:27, 11 October 2020
Line 1:		Line 1:
	Secure S3 bucket and objects using ''S3 bucket policies'', which are written as JSON documents and attached to the bucket we are securing		Secure S3 bucket and objects using ''S3 bucket policies'', which are written as JSON documents and attached to the bucket we are securing
			:[[File:ClipCapIt-201011-142708.PNG\|500px]]

	= Working with JSON =		= Working with JSON =

2020-10-11T13:25:37Z

Read-only access to certain S3 buckets

← Older revision		Revision as of 15:25, 11 October 2020
Line 8:		Line 8:
	== Read-only access to certain S3 buckets ==		== Read-only access to certain S3 buckets ==
	A sample AWS IAM json policy file with read-only access to certain S3 buckets. Formatted by JSON Viewer in NP++		A sample AWS IAM json policy file with read-only access to certain S3 buckets. Formatted by JSON Viewer in NP++
			<syntaxhighlight lang=json>
	{		{
	"Statement": [{		"Statement": [{
	"Effect": "Allow",		"Effect": "Allow",
	"Action": ["s3:ListBucket",		"Action": ["s3:ListBucket",
	"s3:GetObject",		"s3:GetObject",
	"s3:GetObjectVersion"],		"s3:GetObjectVersion"],
	"Resource": ["arn:aws:s3:::my_bucket/*",		"Resource": ["arn:aws:s3:::my_bucket/*",
	"arn:aws:s3:::my_bucket"]		"arn:aws:s3:::my_bucket"]
	}],		}],
	"Statement": [{		"Statement": [{
	"Effect": "Allow",		"Effect": "Allow",
	"Action": ["s3:ListBucket",		"Action": ["s3:ListBucket",
	"s3:GetObject",		"s3:GetObject",
	"s3:GetObjectVersion"],		"s3:GetObjectVersion"],
	"Resource": ["arn:aws:s3:::my_other_bucket/*",		"Resource": ["arn:aws:s3:::my_other_bucket/*",
	"arn:aws:s3:::my_other_bucket"]		"arn:aws:s3:::my_other_bucket"]
	}],		}],
	"Statement": [{		"Statement": [{
	"Effect": "Allow",		"Effect": "Allow",
	"Action": ["s3:ListAllMyBuckets"],		"Action": ["s3:ListAllMyBuckets"],
	"Resource": "*",		"Resource": "*",
	"Condition": {		"Condition": {

	}		}
	}]		}]
	}		}
			</syntaxhighlight>

	== Limited access to users named buckets ==		== Limited access to users named buckets ==

2020-10-11T13:18:27Z

Policy Examples

← Older revision		Revision as of 15:18, 11 October 2020
Line 6:		Line 6:
	Plugin shows the JSON in a tree format in a separate frame, it also formats JSON in a readable format in the main Notepad++ window. To format a JSON string, paste it into Notepad++ and select it. Then go to <tt>Plugins > JSON Viewer > '''Format JSON''' [Ctrl+Alt+Shift+M]</tt> and it should instantly format it for you, then choose <tt>'''Show JSON Viewer''' [Ctrl+Alt+Shift+J]</tt>		Plugin shows the JSON in a tree format in a separate frame, it also formats JSON in a readable format in the main Notepad++ window. To format a JSON string, paste it into Notepad++ and select it. Then go to <tt>Plugins > JSON Viewer > '''Format JSON''' [Ctrl+Alt+Shift+M]</tt> and it should instantly format it for you, then choose <tt>'''Show JSON Viewer''' [Ctrl+Alt+Shift+J]</tt>

	~~= Policy Examples =~~
	== Read-only access to certain S3 buckets ==		== Read-only access to certain S3 buckets ==
	A sample AWS IAM json policy file with read-only access to certain S3 buckets. Formatted by JSON Viewer in NP++		A sample AWS IAM json policy file with read-only access to certain S3 buckets. Formatted by JSON Viewer in NP++

2020-10-11T13:18:11Z

Working with JSON

← Older revision		Revision as of 15:18, 11 October 2020
Line 1:		Line 1:
			Secure S3 bucket and objects using ''S3 bucket policies'', which are written as JSON documents and attached to the bucket we are securing

	= Working with JSON =		= Working with JSON =
	Download Notepad++ plugin [http://sourceforge.net/projects/nppjsonviewer/ nppjsonviewer]. Install the plugin by just dropping the DLL in the plugin folder. You can also use Plugin Manager bu going to <tt>Plugins > Plugin Manager > Show Plugin Manager > find JSON Viewer</tt> last current version 1.21.		Download Notepad++ plugin [http://sourceforge.net/projects/nppjsonviewer/ nppjsonviewer]. Install the plugin by just dropping the DLL in the plugin folder. You can also use Plugin Manager bu going to <tt>Plugins > Plugin Manager > Show Plugin Manager > find JSON Viewer</tt> last current version 1.21.

2020-10-11T13:17:13Z

Pio2pio moved page AWS/IAM Policy My Examples to AWS/S3 Bucket Policies without leaving a redirect

← Older revision	Revision as of 15:17, 11 October 2020
(No difference)

2018-12-20T19:29:36Z

← Older revision	Revision as of 21:29, 20 December 2018
(No difference)

2018-09-29T10:33:12Z

← Older revision		Revision as of 12:33, 29 September 2018
Line 34:		Line 34:
	}]		}]
	}		}


	~~[[Category:AWS]]~~

	== Limited access to users named buckets ==		== Limited access to users named buckets ==
Line 138:		Line 135:
	]		]
	}		}
			----
			[[Category:aws]]

2014-05-26T20:26:24Z

Read-only access to certain S3 buckets

← Older revision		Revision as of 22:26, 26 May 2014
Line 34:		Line 34:
	}]		}]
	}		}


			[[Category:AWS]]

	== Limited access to users named buckets ==		== Limited access to users named buckets ==

2014-04-27T19:12:42Z

Limited access to users named buckets

← Older revision		Revision as of 21:12, 27 April 2014
Line 36:		Line 36:

	== Limited access to users named buckets ==		== Limited access to users named buckets ==
	This policy structure can be used ~~when~~ you ~~want to~~ have someone to administrate ~~one~~ of ~~groups where you have your~~ clients to upload their files that are too big for an email. In this case you can create following three groups:		This policy structure can be used in a scenario you have someone to administrate a group of clients to that can upload their files that are too big for an email to be send to you. In this case you can create following three groups where users in '''bucketsadmins''' group have full access to a company AWS account and can create a user, add, remove, create access keys for your clients. Then these clients need to be placed in '''bucketusers''' to lock them down only to one bucket where they have only API access.

	*'''admins''' - full account administration access to a console and API		*'''admins''' - full account administration access to a console and API