feature: IAM Policies S3 Wasabi compatibles

IAM/README.md

@@ -0,0 +1,7 @@
+# IAM Policies
+
+Actually those policies are tested on Wasabi S3 account.
+
+## Limitations
+
+* The policy `user_allow_specific_bucket.json` doesn't allow console operations

IAM/user_allow_specific_bucket.json

@@ -0,0 +1,15 @@
+{
+    "Statement": [
+        {
+            "Resource": [
+                "arn:aws:s3:::bucket-name/*",
+                "arn:aws:s3:::bucket-name"
+            ],
+            "Action": [
+                "s3:*"
+            ],
+            "Effect": "Allow"
+        }
+    ],
+    "Version": "2012-10-17"
+}

IAM/user_deny_explicitly_all_excluding_bucket.json

@@ -0,0 +1,25 @@
+{
+    "Statement": [
+        {
+            "NotResource": [
+                "arn:aws:s3:::bucket-name/*",
+                "arn:aws:s3:::bucket-name"
+            ],
+            "Action": [
+                "s3:ListBucket",
+                "s3:GetBucketLocation",
+                "s3:ListBucketMultipartUploads"
+            ],
+            "Effect": "Deny"
+        },
+        {
+            "NotResource": [
+                "arn:aws:s3:::bucket-name/*",
+                "arn:aws:s3:::bucket-name"
+            ],
+            "Action": "s3:*",
+            "Effect": "Deny"
+        }
+    ],
+    "Version": "2012-10-17"
+}