Skip to content

Instantly share code, notes, and snippets.

@ELHoussineT

ELHoussineT/monosnap policy aws.json

Created February 13, 2024 14:21
Show Gist options
  • Save ELHoussineT/badd9951cafd1293079763337dd86acc to your computer and use it in GitHub Desktop.
Save ELHoussineT/badd9951cafd1293079763337dd86acc to your computer and use it in GitHub Desktop.
Download ZIP
Minimal policy to give to monosnap for s3 upload
Raw
monosnap policy aws.json
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowGroupToSeeBucketListInTheConsole",
"Action": [
"s3:ListAllMyBuckets"
],
"Effect": "Allow",
"Resource": [
"arn:aws:s3:::*"
]
},
{
"Sid": "Stmt1410750108000",
"Effect": "Allow",
"Action": [
"s3:GetObjectAcl",
"s3:GetObject",
"s3:GetObjectVersionAcl",
"s3:GetObjectVersion",
"s3:ListBucket",
"s3:PutObjectAcl",
"s3:PutObject",
"s3:PutObjectVersionAcl"
],
"Resource": [
"arn:aws:s3:::<your-bucket-name>/*"
]
}
]
}
@ELHoussineT
Copy link
Author

You can remove list all buckets allow statement after you select your desired bucket from monosnap app GUI. Like this you will not give monosnap excessive permissions.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment