Skip to content

Glossary: Modern Vulnerabilities, Malware and Physical Attacks

Bucket policy

Also written: policy

A JSON rule that grants access to a bucket using Effect, Principal, Action and Resource fields. A policy with "Principal": "*" and s3:GetObject lets anyone download every object.

Where the book teaches it

Related terms

PrincipalJSON (JavaScript Object Notation)Block Public Accessarn (Amazon Resource Name)