Skip to content

Commit 5106887

Browse files
authored
Update EN IAM guide.en-gb.md
Changelog: - Adding a Deny s3:ListAllMyBuckets example
1 parent a75b7f4 commit 5106887

File tree

1 file changed

+18
-0
lines changed
  • pages/storage_and_backup/object_storage/s3_identity_and_access_management

1 file changed

+18
-0
lines changed

pages/storage_and_backup/object_storage/s3_identity_and_access_management/guide.en-gb.md

Lines changed: 18 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -120,6 +120,24 @@ Some examples of JSON configuration files:
120120
}
121121
```
122122

123+
**Deny listing of all buckets owned by the parent account**
124+
125+
> [!primary]
126+
>
127+
> The (`s3:ListAllMyBuckets`) action is allowed by default for a given user. Add the `deny`{.action} effect if you want to explictly refuse the use of the `ListBuckets`{.action} API operation.
128+
>
129+
130+
```json
131+
{
132+
"Statement":[{
133+
"Sid": "DenyListBucket",
134+
"Effect": "Deny",
135+
"Action":["s3:ListAllMyBuckets"],
136+
"Resource":["*"]
137+
}]
138+
}
139+
```
140+
123141
**Allow all operations on all project resources**
124142

125143
```json

0 commit comments

Comments
 (0)