IAM Policy JSON Format

Describes the JSON format for an IAM policy.

An Identity Access Management (IAM) policy is a JSON file that comprises one or more statements. Each statement contains one or more actions related to one or more resources. The effect in a policy states if the policy allows or denies the operations on the resources specified in the policy.

The following is a sample IAM policy in JSON format:

{
  "Description": "Sample IAM Policy",                            <-- Description of Policy
  "Active": true,                                                <-- Indicates whether Policy is to be Enforced (active) or Disarmed (inactive)
  "Statement":[
  {
    "Sid": "Statement-1",                                        <-- Statement description
    "Effect": "Deny",                                            <-- Specifies whether to allow or deny resource access
    "Action": ["PutObject", "GetObject", "DeleteObject"],        <-- Access is restricted to actions for the specified resource type
    "Resource": ["urn:group1:cluster1:s3bucket:bucket2"]         <-- List of actual resources identified with the resource URN, to control access
  },
  {
    "Sid": "Statement-2",
    "Effect": "Allow",
    "Action": ["ReadVolume", "WriteVolume"],
    "Resource": ["urn:group1:cluster2:volume:vol-1",
                 "urn:group1:cluster3:volume:vol-2"]
  }
  ]
}