unitoo/configurations
1
0
Fork 2
Code Issues 3 Pull requests Projects Releases Packages Wiki Activity

feature: IAM Policies S3 Wasabi compatibles

Browse source
This commit is contained in:
Claudio Maradonna 2021-08-07 11:39:32 +02:00
parent c56954a92a
commit 73185baeac
Signed by: claudiomaradonna
GPG key ID: B1EDCB4C3B05C387
3 changed files with 47 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
IAM/README.md Normal file
View file

@ -0,0 +1,7 @@
# IAM Policies
Actually those policies are tested on Wasabi S3 account.
## Limitations
* The policy `user_allow_specific_bucket.json` doesn't allow console operations

15
IAM/user_allow_specific_bucket.json Normal file
View file

@ -0,0 +1,15 @@
{
"Statement": [
{
"Resource": [
"arn:aws:s3:::bucket-name/*",
"arn:aws:s3:::bucket-name"
],
"Action": [
"s3:*"
],
"Effect": "Allow"
}
],
"Version": "2012-10-17"
}

25
IAM/user_deny_explicitly_all_excluding_bucket.json Normal file
View file

@ -0,0 +1,25 @@
{
"Statement": [
{
"NotResource": [
"arn:aws:s3:::bucket-name/*",
"arn:aws:s3:::bucket-name"
],
"Action": [
"s3:ListBucket",
"s3:GetBucketLocation",
"s3:ListBucketMultipartUploads"
],
"Effect": "Deny"
},
{
"NotResource": [
"arn:aws:s3:::bucket-name/*",
"arn:aws:s3:::bucket-name"
],
"Action": "s3:*",
"Effect": "Deny"
}
],
"Version": "2012-10-17"
}