[Quick] Handy AWS S3 Bucket Policies

Granting of Bucket Access to Another AWS Account

{
     "Version": "2012-10-17",
     "Statement": [
          {
         "Sid": "DelegateS3Access",
         "Effect": "Allow",
         "Principal": {
         "AWS": "arn:aws:iam::<account-id>:root"
       },
    "Action": [
                "s3:ListBucket",
                "s3:GetObject"
              ],
    "Resource": [
                "arn:aws:s3:::<bucket-name>/*",
                "arn:aws:s3:::<bucket-name>"
              ]
      }
 ]
}

Advertisements