AWS S3 - 指定バケットだけアクセス IAMポリシー

指定したS3バケットだけを参照できるようにする

例．バケット名が「sample1」

{     "Version": "2012-10-17",     "Statement": [         {             "Effect": "Allow",             "Action": [                 "s3:GetBucketLocation",                 "s3:ListBucket"             ],             "Resource": "arn:aws:s3::: sample1"         },         {             "Effect": "Allow",             "Action": [                 "s3:DeleteObject",                 "s3:GetObject",                 "s3:PutObject"             ],             "Resource": "arn:aws:s3::: sample1/*"         }     ] }

Readonlyにしたい場合

{     "Version": "2012-10-17",     "Statement": [         {             "Effect": "Allow",             "Action": [                 "s3:GetBucketLocation",                 "s3:ListBucket"             ],             "Resource": "arn:aws:s3::: sample1"         },         {             "Effect": "Allow",             "Action": [                 "s3:GetObject"             ],             "Resource": "arn:aws:s3::: sample1/*"         }     ] }