read-only policy without listing all objects in bucket

2026-02-27 02:20:06 +00:00
commit e35379f4d0
1 changed files with 14 additions and 0 deletions
--- a/readonly-policy.json
+++ b/readonly-policy.json
@@ -0,0 +1,14 @@
+{
+    "Version": "2012-10-17",
+    "Statement": [
+        {
+            "Effect": "Allow",
+            "Principal": {
+                "AWS": ["*"]
+            },
+            "Action": ["s3:GetObject"],
+            "Resource": ["arn:aws:s3:::movies/*"]
+
+        }
+    ]
+}