AWS Security Cookbook

Bucket list access with a bucket policy from the CLI

In this section, we will see how to add a bucket policy from the CLI:

1. If you are following along from the previous section, remove the bucket policy that was added. Verify that you do not have access to list the bucket or get the object from the browser.
2. Create a bucket policy to allow our test user to access it and save it as bucket-policy-allow-test-user.json:

{    "Id": "Policy1560416549842",    "Version": "2012-10-17",    "Statement": [        {            "Sid": "ListAllBuckets",            "Action": [                "s3:ListBucket"            ],            "Effect": "Allow",            "Resource": "arn:aws:s3:::awsseccookbook",            "Principal": {                "AWS": "arn:aws:iam::135301570106:user/testuser"            }        }    ]}

The condition element is an optional element.

3. Attach the policy to ...