Example of a policy statement for AWS
Following is an example of policy statement that you can use to manage the permissions for the users. This policy assigns the following permissions:
s3:GetBucketLocation and s3:GetObject on vrp-bucket
ec2:ImportSnapshot, ec2:DescribeSnapshot, and ec2:CopySnapshot on all the resources
{
"Version": "2012-10-177",
"Statement": [
{
"Effect": "Allow",
"Action": [
"s3:GetBucketLocation",
"s3:GetObject"
],
"Resource": [
"arn:aws:s3:::drlbucketqcowsk",
"arn:aws:s3:::drlbucketqcowsk/*"
]
},
{
"Effect": "Allow",
"Action": [
"ec2:ImportSnapshot",
"ec2:DescribeSnapshots",
"ec2:CopySnapshot"
],
"Resource": "*"
}
]
}