CODEWITHSUNDEEP
amazon-web-servicesamazon-s3amazon-iam
toto'
toto'

Reputation: 1584

AWS access to S3 bucket's folder for user groups

I understand that in AWS we can control access to AWS S3 bucket as well as to contained folders for each user by using username variable in the bucket IAM policy. I followed this blog: Writing IAM Policies: Grant Access to User-Specific Folders in an Amazon S3 Buckete

The question is that I do not see how this can be possible also for groups. Because I want to create folders for groups rather than folders for users. According to this IAM Policy Elements: Variables and Tags I understand that there is NO variable group that I can use in the policy.

Any idea? thanks

Upvotes: 0

Views: 276

Answers (1)

John Rotenstein
John Rotenstein

Reputation: 270294

I don't think this would be possible because an IAM User an be in multiple IAM Groups, so the name of the folder would not be predictable.

Instead, you would need to add a policy to each group that grants access to a specific bucket + path.

Upvotes: 1

Related Questions