AWS s3 bucket policy demo

Опубликовано: 12 Август 2026
на канале: Cora Wang

If your bucket was compromised and needed to be locked down. This video shows how to write a very simple deny policy to block all access.
{
"Version": "2012-10-17",
"Id": "Policy1723712634674",
"Statement": [
{
"Effect": "Deny",
"Principal": "*",
"Action": "s3:*",
"Resource": "arn:aws:s3:::test-bucket-eb39emstul8",
"Condition": {
"ArnNotLike": {
"aws:PrincipalArn": "arn:aws:iam::*:role/test-bucket-eb39emstul8-allowed"
}
}
},
{
"Effect": "Deny",
"Principal": "*",
"Action": "s3:*",
"Resource": "arn:aws:s3:::test-bucket-eb39emstul8",
"Condition": {
"StringNotEquals": {
"aws:PrincipalOrgID": "o-xxxxxxnvy6"
}
}
}
]
}