1
0
mirror of https://github.com/Luzifer/past3.git synced 2024-09-19 00:42:59 +00:00

Document Cognito Auth-Policy

This commit is contained in:
Knut Ahlers 2017-01-15 03:02:34 +01:00
parent ec62d4af22
commit 824dfb7f6e
Signed by: luzifer
GPG Key ID: DC2729FDD34BE99E

46
cognito_auth_policy.json Normal file
View File

@ -0,0 +1,46 @@
{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Action": [
"mobileanalytics:PutEvents",
"cognito-sync:*",
"cognito-identity:*"
],
"Resource": [
"*"
]
},
{
"Effect": "Allow",
"Action": [
"s3:ListBucket"
],
"Resource": [
"arn:aws:s3:::past3"
],
"Condition": {
"StringLike": {
"s3:prefix": [
"${cognito-identity.amazonaws.com:sub}/"
]
}
}
},
{
"Effect": "Allow",
"Action": [
"s3:GetObject",
"s3:GetObjectAcl",
"s3:PutObject",
"s3:PutObjectAcl",
"s3:DeleteObject"
],
"Resource": [
"arn:aws:s3:::past3/${cognito-identity.amazonaws.com:sub}",
"arn:aws:s3:::past3/${cognito-identity.amazonaws.com:sub}/*"
]
}
]
}