When the AWS administrator selects a role for cluster users, the AWS console generates a default access policy. After the AWS console generates the default policy, you can copy it and customize it to grant access to specific resources to specific users.

Complete the following steps to copy an existing S3 access policy:

In the AWS console, click the
Services
menu.
The image below shows the
Services
menu in the menu bar:

Type "IAM" in the search bar and press Enter.
The
Welcome to Identity and Access Management
screen opens.
In the menu on the left, select
Policies
.
The console displays a list of existing policies.
Type "S3" in the search bar and press Enter.
The console displays a list of existing S3 access policies.
The image below shows an example of a list of S3 access policies:

Click the name of the policy that you want to copy.
The policy opens in a read-only window.
Highlight and copy the policy statement.

After you copy the JSON statement, you can edit it in a text editor or in the bucket policy editor.