This policy will assign a specific user access to a specific bucket in s3 { “Version”: “2012-10-17”, “Statement”: [ { “Effect”: “Allow”, “Action”: [ “s3:GetBucketLocation”, “s3:ListAllMyBuckets” ], “Resource”: “arn:aws:s3:::*” }, { “Effect”: “Allow”, “Action”: “s3:*”, “Resource”: [ “arn:aws:s3:::mybucketname”, “arn:aws:s3:::mybucketname/*” ] } ] }