Viewing the bucket policy for your Amazon S3 on Outposts bucket - Amazon Simple Storage Service
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

Viewing the bucket policy for your Amazon S3 on Outposts bucket

A bucket policy is a resource-based Amazon Identity and Access Management (IAM) policy that you can use to grant access permissions to your bucket and the objects in it. Only the bucket owner can associate a policy with a bucket. The permissions attached to the bucket apply to all of the objects in the bucket that are owned by the bucket owner. Bucket policies are limited to 20 KB in size. For more information, see Bucket policy.

The following topics show you how to view your Amazon S3 on Outposts bucket policy by using the Amazon Web Services Management Console, Amazon Command Line Interface (Amazon CLI), or Amazon SDK for Java.

To create or edit a bucket policy

  1. Sign in to the Amazon Web Services Management Console and open the Amazon S3 console at https://console.amazonaws.cn/s3/.

  2. In the left navigation pane, choose Outposts buckets.

  3. Choose the Outposts bucket whose permission you want to edit.

  4. Choose the Permissions tab.

  5. In the Outposts bucket policy section, you can review your existing bucket policy. For more information, see Setting up IAM with S3 on Outposts.

The following Amazon CLI example gets a policy for an Outposts bucket. To run this command, replace the user input placeholders with your own information.

aws s3control get-bucket-policy --account-id 123456789012 --bucket arn:aws-cn:s3-outposts:region:123456789012:outpost/op-01ac5d28a6a232904/bucket/example-outposts-bucket

The following SDK for Java example gets a policy for an Outposts bucket.

import com.amazonaws.services.s3control.model.*;

public void getBucketPolicy(String bucketArn) {

    GetBucketPolicyRequest reqGetBucketPolicy = new GetBucketPolicyRequest()
            .withAccountId(AccountId)
            .withBucket(bucketArn);

    GetBucketPolicyResult respGetBucketPolicy = s3ControlClient.getBucketPolicy(reqGetBucketPolicy);
    System.out.printf("GetBucketPolicy Response: %s%n", respGetBucketPolicy.toString());

}