Walkthrough 1: To grant users bucket permissions

The first walkthrough is that an AWS account owns a bucket and has an IAM user in the AWS account. The scenario is as follows:

  • The IAM user has no permissions and needs to be granted permissions to operate any tasks on the bucket
  • The bucket owner and the parent account are the same
  • The AWS account can use a bucket policy, a user policy or both to grant its user permissions on the bucket


    AWS IAM (Identification and Access Management) is to control access to AWS resources. For more information about IAM, see http://docs.aws.amazon.com/IAM/latest/UserGuide/introduction.html.

The following diagram shows the relation between an AWS account, an S3 bucket, an IAM user, a bucket policy, and a user policy ...

Get Amazon S3 Cookbook now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.