termcloud/examples/bucket-policy.json

40 lines
824 B
JSON

{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowReadOnlyAccess",
"Effect": "Allow",
"Principal": {
"User": ["john", "jane"]
},
"Action": [
"termcloud:GetObject",
"termcloud:ListObjects"
],
"Resource": [
"arn:termcloud:s3:::my-bucket/*",
"arn:termcloud:s3:::my-bucket"
]
},
{
"Sid": "DenyDeleteOperations",
"Effect": "Deny",
"Principal": {
"User": ["*"]
},
"Action": [
"termcloud:DeleteObject",
"termcloud:DeleteBucket"
],
"Resource": [
"arn:termcloud:s3:::my-bucket/*",
"arn:termcloud:s3:::my-bucket"
],
"Condition": {
"StringNotEquals": {
"termcloud:username": "admin"
}
}
}
]
}