PowerExchange for Amazon S3 User Guide

10.4.1
- 10.5.9
- 10.5.8
- 10.5.7
- 10.5.6
- 10.5.5
- 10.5.4
- 10.5.3
- 10.5.2
- 10.5.1
- 10.5
- 10.4.0

Back Next

Create a Minimal Amazon IAM Policy

You can configure an IAM policy through the AWS console. Use Amazon IAM authentication to securely control access to Amazon S3 resources.

The following table describes the minimum Amazon S3 bucket policy required for users to successfully read data from or write data to Amazon S3 bucket:

S3 Policy	Description
PutObject	Writes the files to the Amazon S3 bucket. The Data Integration Service validates the bucket policy during runtime.
GetObject	Reads the files from the Amazon S3 bucket. The Data Integration Service validates the bucket policy during design time and runtime.
DeleteObject	Deletes the files from the Amazon S3 bucket. The Data Integration Service validates the bucket policy during runtime.
ListBucket	Lists the files that are available in the Amazon S3 bucket. The Data Integration Service validates the bucket policy during design time and runtime.

You can use the following sample minimal Amazon IAM policy:

{
    "Version": "2012-10-17",
    "Statement": 
	[
        {
            "Effect": "Allow",
            "Action":[
                "s3:PutObject",
                "s3:GetObject",
                "s3:DeleteObject",
                "s3:ListBucket",
                     ],
            "Resource": [
                "arn:aws:s3:::<bucket_name>/*",
                "arn:aws:s3:::<bucket_name>"
                        ]
        }
    ]
}

Rename Saved Search

Table of Contents

PowerExchange for Amazon S3 User Guide

PowerExchange for Amazon S3 User Guide

Create a Minimal Amazon IAM Policy

Create a Minimal Amazon IAM Policy