IAM Bucket Policy default for least privilege AWS cloud backup. (4370536)

IAM Bucket Policy default for least privilege AWS cloud backup.

What are the permission or AWS bucket policy for an IAM user with least-privilege using IAM bucket policies, rather than giving the IAM user full access permissions to write backups to AWS Cloud Storage?

The IAM User account requires List and Write access to the S3 bucket where RMAD will write the backups to ensure RMAD Cloud storage functions as expected.

The following are also examples of S3 bucket policies:

Writing IAM Policies: Grant Access to User-Specific Folders in an Amazon S3 Bucket | AWS Security Blog:
https://aws.amazon.com/blogs/security/writing-iam-policies-grant-access-to-user-specific-folders-in-an-amazon-s3-bucket/

Amazon S3: Allows read and write access to objects in an S3 Bucket - AWS Identity and Access Management:
https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_examples_s3_rw-bucket.html


Any additional help with writing the actual policies or "fine tuning" them, then we recommend to reach out to AWS for assistance on permissioning Amazon's S3 product.

All RMAD needs is list and write, which these should accomplish. We don't perform retention or anything else. All we do is write the backup to the bucket chosen.