AWS S3

S3
Bucket Policy
- JSON 형식으로 이루어짐
- 버킷에 대해서만 권한 설정 가능(개별 객체는 불가)
- JSON을 통해 세분화된 권한 설정 가능
{
"Version": "2023-03-09", //버킷 정책의 문법이 언제를 기준으로 사용하는지
"Id": "PutObjPolicy", //버킷 정책의 고유 아이디, 자동으로 부여되는 경우 많음
"Statement": [
{
"Sid": "Statement1", //각 statement의 고유 아이디
"Effect": "Allow", //버킷에 대한 명령을 allow하거나 deny하는 것
"Principal": {"AWS": "적용대상 ARN"}, //버킷 정책의 적용대상
"Action": [
"s3:GetObject",
"s3:ListBucket"
],
"Resource": "arn:aws:s3:::bucketname/*", //대상 버킷에 대한 정보
"Condition": {
"NotIpAddress": {
"aws:SourceIp": "0.0.0.0/0"
}, //이 IP 비허용
"IpAddress": {
"aws:SourceIp": [
"192.168.1.1/32",
"192.168.10.1/32"
]
}
}
}
]
}