Working with Amazon S3 Bucket Policies

You can use a bucket policy to grant permission to your Amazon S3 resources. To learn more, see Using Bucket Policies and User Policies.

The example below shows how to:

• Return the policy for a specified bucket using GetBucketPolicy.
• Replace a policy on a bucket using PutBucketPolicy.
• Delete a policy from a bucket using DeleteBucketPolicy.

All the example code for the AWS SDK for PHP is available here on GitHub.

Credentials

Before running the example code, configure your AWS credentials, as described in Credentials.

Get, Delete, and Replace a Policy on a Bucket

require "vendor/autoload.php";
use Aws\S3\S3Client;
use Aws\Exception\AwsException;
// Create a S3Client
$s3Client = new S3Client([
    'region' => 'us-west-2',
    'version' => '2006-03-01'
]);
$bucket = 'my-s3-bucket';
// Get the policy of a specific bucket
try {
    $resp = $s3Client->getBucketPolicy([
        'Bucket' => $bucket
    ]);
    echo "Succeed in receiving bucket policy:\n";
    echo $resp->get('Policy');
    echo "\n";
} catch (AwsException $e) {
    // Display error message
    echo $e->getMessage();
    echo "\n";
}
// Deletes the policy from the bucket
try {
    $resp = $s3Client->deleteBucketPolicy([
        'Bucket' => $bucket
    ]);
    echo "Succeed in deleting policy of bucket: " . $bucket . "\n";
} catch (AwsException $e) {
    // Display error message
    echo $e->getMessage();
    echo "\n";
}
// Replaces a policy on the bucket
try {
    $resp = $s3Client->putBucketPolicy([
        'Bucket' => $bucket,
        'Policy' => 'foo policy',
    ]);
    echo "Succeed in put a policy on bucket: " . $bucket . "\n";
} catch (AwsException $e) {
    // Display error message
    echo $e->getMessage();
    echo "\n";
}