AWS::S3::BucketPolicy

S3 BucketPolicy

Applies an Amazon S3 bucket policy to an Amazon S3 bucket. If you are using an identity other than the root user of the AWS-account that owns the bucket, the calling identity must have the PutBucketPolicy permissions on the specified bucket and belong to the bucket owner's account in order to use this operation. If you don't have PutBucketPolicy permissions, Amazon S3 returns a 403 Access Denied error. If you have the correct permissions, but you're not using an identity that bel...

Properties

2 configurable properties. 2 required. Click a row to see details.

Filter:

Property	Type	Flags
`Bucket`	`string`	RequiredCreate-only
`PolicyDocument`	`objectstring`	Required

Sample CloudFormation Template

A minimal template with required properties and common optional ones.

template.yaml

AWSTemplateFormatVersion: "2010-09-09"
Description: Sample template for AWS::S3::BucketPolicy

Resources:
  MyResource:
    Type: AWS::S3::BucketPolicy
    Properties:
      Bucket: "value"
      PolicyDocument: "value"

Required IAM Permissions

Permissions CloudFormation needs in your IAM role to manage this resource.

create

s3:GetBucketPolicys3:PutBucketPolicy

read

s3:GetBucketPolicy

update

s3:GetBucketPolicys3:PutBucketPolicy

delete

s3:GetBucketPolicys3:DeleteBucketPolicy

list

s3:GetBucketPolicys3:ListAllMyBuckets

Get the S3 Cheat Sheet

Everything you need to know about S3 on one page. HD quality, print-friendly.

Download Free Infographic

Quick Facts

ServiceS3

Properties2

Required2

TaggingNot supported

Primary IDBucket

Supported Operations

CreateReadUpdateDeleteList

Immutable After Creation

These properties cannot be changed after the resource is created. Updating them triggers a replacement.

Bucket

Related Resources

External Links

AWS Documentation