mirror of
https://github.com/Luzifer/past3.git
synced 2024-11-09 16:30:01 +00:00
Document Cognito Auth-Policy
This commit is contained in:
parent
ec62d4af22
commit
824dfb7f6e
1 changed files with 46 additions and 0 deletions
46
cognito_auth_policy.json
Normal file
46
cognito_auth_policy.json
Normal file
|
@ -0,0 +1,46 @@
|
|||
{
|
||||
"Version": "2012-10-17",
|
||||
"Statement": [
|
||||
{
|
||||
"Effect": "Allow",
|
||||
"Action": [
|
||||
"mobileanalytics:PutEvents",
|
||||
"cognito-sync:*",
|
||||
"cognito-identity:*"
|
||||
],
|
||||
"Resource": [
|
||||
"*"
|
||||
]
|
||||
},
|
||||
{
|
||||
"Effect": "Allow",
|
||||
"Action": [
|
||||
"s3:ListBucket"
|
||||
],
|
||||
"Resource": [
|
||||
"arn:aws:s3:::past3"
|
||||
],
|
||||
"Condition": {
|
||||
"StringLike": {
|
||||
"s3:prefix": [
|
||||
"${cognito-identity.amazonaws.com:sub}/"
|
||||
]
|
||||
}
|
||||
}
|
||||
},
|
||||
{
|
||||
"Effect": "Allow",
|
||||
"Action": [
|
||||
"s3:GetObject",
|
||||
"s3:GetObjectAcl",
|
||||
"s3:PutObject",
|
||||
"s3:PutObjectAcl",
|
||||
"s3:DeleteObject"
|
||||
],
|
||||
"Resource": [
|
||||
"arn:aws:s3:::past3/${cognito-identity.amazonaws.com:sub}",
|
||||
"arn:aws:s3:::past3/${cognito-identity.amazonaws.com:sub}/*"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
Loading…
Reference in a new issue