awacs_iam_policy_s3_bucket_read_access.py

1from awacs.aws import Action, Allow, Policy, Statement
2from awacs.s3 import ARN
3
4# Create a policy that allows s3:Get* actions on a specific bucket
5pd = Policy(
6    Version="2012-10-17",
7    Id="S3PolicyId1",
8    Statement=[
9        Statement(
10            Sid="AllowS3ReadAccess",
11            Effect=Allow,
12            Action=[Action("s3", "Get*")],
13            Resource=[ARN("my-bucket-name/*")],
14        ),
15    ],
16)
17
18# Output the JSON representation of the policy
19print(pd.to_json())