{"id":514,"date":"2013-08-13T07:50:03","date_gmt":"2013-08-13T07:50:03","guid":{"rendered":"https:\/\/mohsinrasool.com\/?p=514"},"modified":"2013-08-13T07:50:03","modified_gmt":"2013-08-13T07:50:03","slug":"giving-access-to-specific-bucket-in-aws-using-iam","status":"publish","type":"post","link":"https:\/\/mohsinrasool.com\/giving-access-to-specific-bucket-in-aws-using-iam\/","title":{"rendered":"Giving Access to Specific Bucket in AWS using IAM"},"content":{"rendered":"

Hi,<\/p>\n

If you are using Amazon S3 for storage, I recommend using IAM to create users with specific access to S3 only or to some specific bucket only. It is great way to give to your developer or client or partner access to specific bucket in your S3 without allowing access to whole Amazon or AWS or S3 account.<\/p>\n

Using IAM service in AWS, you can create groups and users with specific permissions. In my case:<\/p>\n

    \n
  1. I created a group called: test<\/li>\n
  2. then added: testuser as a user in the group<\/li>\n
  3. Used following policy for the group to give access to only ‘test’ bucket<\/li>\n<\/ol>\n

    Policy Code for Specific Bucket View\/Download\/Upload\/Delete Access:<\/strong>
    \nEnable AWS Management Console access to an Amazon S3 bucket:
    \n[code language=”css”]{
    \n"Statement": [
    \n{
    \n"Effect": "Allow",
    \n"Action": ["s3:GetBucketLocation", "s3:ListAllMyBuckets"],
    \n"Resource": "arn:aws:s3:::*"
    \n},
    \n{
    \n"Effect": "Allow",
    \n"Action": ["s3:ListBucket" ],
    \n"Resource": [ "arn:aws:s3:::test"]
    \n},
    \n{
    \n"Effect": "Allow",
    \n"Action": [ "s3:PutObject", "s3:GetObject", "s3:DeleteObject"],
    \n"Resource": [ "arn:aws:s3:::test\/*"]
    \n}
    \n]
    \n}[\/code]<\/p>\n

    For\u00a0Programmatic Access, following\u00a0IAM policy grants programmatic read-write access to the test bucket:<\/p>\n

    [code language=”css”] {
    \n"Statement": [
    \n{
    \n"Effect": "Allow",
    \n"Action": ["s3:ListBucket" ],
    \n"Resource": [ "arn:aws:s3:::test"]
    \n},
    \n{
    \n"Effect": "Allow",
    \n"Action": [ "s3:PutObject", "s3:GetObject", "s3:DeleteObject"],
    \n"Resource": [ "arn:aws:s3:::test\/*"]
    \n}
    \n]
    \n}[\/code]<\/p>\n

     <\/p>\n

    Source:\u00a0http:\/\/blogs.aws.amazon.com\/security\/post\/Tx3VRSWZ6B3SHAV\/Writing-IAM-Policies-How-to-grant-access-to-an-Amazon-S3-bucket<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

    Hi, If you are using Amazon S3 for storage, I recommend using IAM to create users with specific access to S3 only or to some specific bucket only. It is great way to give to your developer or client or partner access to specific bucket in your S3 without allowing access to whole Amazon or […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"spay_email":"","jetpack_publicize_message":"","jetpack_is_tweetstorm":false,"jetpack_publicize_feature_enabled":true},"categories":[2,12,14],"tags":[29,35,87,130],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/pLoVR-8i","_links":{"self":[{"href":"https:\/\/mohsinrasool.com\/wp-json\/wp\/v2\/posts\/514"}],"collection":[{"href":"https:\/\/mohsinrasool.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mohsinrasool.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mohsinrasool.com\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/mohsinrasool.com\/wp-json\/wp\/v2\/comments?post=514"}],"version-history":[{"count":0,"href":"https:\/\/mohsinrasool.com\/wp-json\/wp\/v2\/posts\/514\/revisions"}],"wp:attachment":[{"href":"https:\/\/mohsinrasool.com\/wp-json\/wp\/v2\/media?parent=514"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mohsinrasool.com\/wp-json\/wp\/v2\/categories?post=514"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mohsinrasool.com\/wp-json\/wp\/v2\/tags?post=514"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}