Tricks and Tricks for S3 and LTS

[wwarriner]

What would you like to see added?

Comments in S3 IAM policies

S3 Policies, used by LTS for object-level access control within buckets, are JSON data. Comments are not part of the JSON specification, and AWS does not have a comment field in their IAM policy schema. However, the SID field of Statement objects is option and can be used as an ad-hoc comment. See here for an example.

Specifying "all actions" in IAM policies

Use the following Action block as part of a Statement object to specify all actions are affected by the statement.

"Action": [
  "s3:*"
]