Bucket Policy Generator
JSON Access Policy Builder
Quick Start

Common Templates

Start from a ready-made statement, then tweak it in the Custom builder below

Used to build every ARN: arn:aws:s3:::my-app-bucket/*

Guided mode uses friendly permission profiles. Custom Form gives you direct control over Effect, Principal, Action, Resource, and Condition — valid AWS ARN syntax throughout.

Step 1

Policy Information

Metadata shared by the whole policy document

Policy version is required.
Statement ID is required.
Step 1.5

Effect

Allow or Deny the actions below

Step 2

Permission Profile

Choose what people are allowed to do

Select a permission profile.
Step 3

Advanced Permissions

Hand-pick the exact actions to allow

Select at least one action.
Step 4

Who can access?

Control the audience, WhatsApp-privacy style

Select an access rule.
Step 5

Resources

Files and folders this statement applies to

Add at least one valid resource.
Custom · 1

Effect

Deny always overrides an Allow anywhere else in the policy

Custom · 2

Principal

Who this statement applies to

Choose a principal type.
Custom · 3

Action

Real s3: actions this statement covers

Select at least one action.
Custom · 4

Resource

Built as arn:aws:s3:::{Bucket}/{Resource}

Add at least one resource path (use * for the whole bucket).
Custom · 5

Condition (optional)

e.g. require HTTPS, restrict by IP, restrict by principal

bucket-policy.json
Live
Editable — type JSON directly, or use the form on the left 0 statements

This editor is fully editable. Add extra statements by hand, or use + Add Statement above the form — the form always edits the active statement.

Tharvbytes.dev
Learn • Build • Share

Thank you for being part of my journey ❤️