IAM Policy 구조
{
"Effect": "Allow",
"Action": "s3:GetObject",
"Resource": "arn:aws:s3:::bucket/*",
"Condition": {"IpAddress": {"aws:SourceIp": "1.2.3.0/24"}}
}IAM Policy란?
정의
JSON 권한 문서. Version·Statement·Action·Resource·Condition.
JSON 권한 문서. Version·Statement·Action·Resource·Condition.
{
"Effect": "Allow",
"Action": "s3:GetObject",
"Resource": "arn:aws:s3:::bucket/*",
"Condition": {"IpAddress": {"aws:SourceIp": "1.2.3.0/24"}}
}