S3 Read Policy Generator
Generate a bucket policy granting one IAM role list and object read access.
Processing stays in your browser. Creates list/get grants for an explicit role. A prefix limits object access and list prefixes; other identity policies, explicit denies, and account settings affect access.
How to use the s3 read policy generator
Generate a bucket policy granting one IAM role list and object read access. Complete the bucket name, iam role arn, object key prefix (optional) fields above. Choose Run tool, review the output, then copy or download the result.
Example
public/ limits GetObject resources to public/*.
Good to know
Creates list/get grants for an explicit role. A prefix limits object access and list prefixes; other identity policies, explicit denies, and account settings affect access.