github.com/minio/console@v1.4.1/web-app/tests/policies/rewind-allowed.json (about)

     1  {
     2    "Version": "2012-10-17",
     3    "Statement": [
     4      {
     5        "Effect": "Deny",
     6        "Action": ["s3:CreateBucket", "s3:DeleteBucket"],
     7        "Resource": ["arn:aws:s3:::*"]
     8      },
     9      {
    10        "Effect": "Allow",
    11        "Action": ["s3:ListBucket"],
    12        "Resource": ["arn:aws:s3:::bucketname"]
    13      },
    14      {
    15        "Effect": "Allow",
    16        "Action": ["s3:GetBucketLocation", "s3:GetBucketVersioning"],
    17        "Resource": ["arn:aws:s3:::bucketname"]
    18      },
    19      {
    20        "Effect": "Allow",
    21        "Action": ["s3:GetObject"],
    22        "Resource": [
    23          "arn:aws:s3:::bucketname/firstlevel",
    24          "arn:aws:s3:::bucketname/firstlevel/*"
    25        ]
    26      },
    27      {
    28        "Effect": "Allow",
    29        "Action": ["s3:*"],
    30        "Resource": [
    31          "arn:aws:s3:::bucketname/firstlevel/secondlevel*",
    32          "arn:aws:s3:::bucketname/firstlevel/secondlevel/*"
    33        ]
    34      }
    35    ]
    36  }