Difference between revisions of "Template:Aws s3 bucket policy example"
Jump to navigation
Jump to search
Line 17: | Line 17: | ||
actions = [ | actions = [ | ||
− | "s3:GetObject", | + | "[[s3:GetObject]]", |
− | "s3:ListBucket", | + | "[[s3:ListBucket]]", |
] | ] | ||
Latest revision as of 08:39, 8 June 2023
resource "aws_s3_bucket" "example" { bucket = "my-tf-test-bucket" } resource "aws_s3_bucket_policy" "allow_access_from_another_account" { bucket = aws_s3_bucket.example.id policy = data.aws_iam_policy_document.allow_access_from_another_account.json } data "aws_iam_policy_document" "allow_access_from_another_account" { statement { principals { type = "AWS" identifiers = ["123456789012"] } actions = [ "s3:GetObject", "s3:ListBucket", ] resources = [ aws_s3_bucket.example.arn, "${aws_s3_bucket.example.arn}/*", ] } }
Advertising: