xxxxxxxxxx
aws s3api put-bucket-policy --bucket "BUCKET_NAME" --policy="{
\"Id\": \"SOME_ID\",
\"Version\": \"2012-10-17\",
\"Statement\": [
{
\"Sid\": \"SOME_ID\",
\"Action\": \"s3:*\",
\"Effect\": \"Allow\",
\"Resource\": [
\"arn:aws:s3:::BUCKET_NAME\",
\"arn:aws:s3:::BUCKET_NAME/*\"
],
\"Principal\": {
\"AWS\": [
\"arn:aws:iam::ACCOUNT:user/IAM_USER\",
\"arn:aws:iam::ACCOUNT:role/SOME_ROLE\"
]
}
}
]
}"