Mira's Standard Bucket Policy

Mira's standard AWS policy for external S3 buckets

When implementing the below policy, the resources in the Resource array will need to be updated with the actual bucket name and prefix.

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "FullReadWritePerms",
            "Effect": "Allow",
            "Principal": {
                "AWS": "arn:aws:iam::671017791904:role/DATA_TRANSFER_ROLE"
            },
            "Action": [
                "s3:GetObject",
                "s3:ListBucket",
                "s3:PutObject*",
                "s3:AbortMultipartUpload",
                "s3:DeleteObject"
            ],
            "Resource": [
                "arn:aws:s3:::{{ bucket }}",
                "arn:aws:s3:::{{ bucket }}/{{ prefix }}*"
            ]
        }
    ]
}