S3 policy - Transfer Family SFTP

Question

Hello, 
I'm facing a concern trying to create a policy for some SFTP users, the thing that I'm trying to do is to give permission to see specific files inside the bucket but I don't find the right way to do it.

Answer

Have you tried setting up the policy as follows ? :

{
 "Version":"2012-10-17",
 "Statement": [
  {
     "Sid": "List",
     "Action": ["s3:ListBucket"],
     "Effect": "Allow",
     "Resource": ["arn:aws:s3:::bucket"]
    },
   {
     "Sid": "AllowAllS3ActionsInUserFolder",
     "Effect": "Allow",
     "Action": ["s3:GetObject"],
     "Resource": ["arn:aws:s3:::bucket/home/filename.txt"]
   }
 ]
}

S3 policy - Transfer Family SFTP

Conteúdo relevante