Add restic S3 Policy

2025-05-24 14:46:17 +00:00 · 2024-10-21 21:21:39 +02:00 · 2024-10-21 21:21:39 +02:00 · 72b4c308b4
commit 72b4c308b4
parent 945b4c13e7
1 changed files with 29 additions and 0 deletions
--- a/restic-s3.policy
+++ b/restic-s3.policy
@ -0,0 +1,29 @@
+{
+  "Version": "2012-10-17",
+  "Statement": [
+    {
+      "Effect": "Allow",
+      "Action": [
+        "s3:PutObject",
+        "s3:GetObject"
+      ],
+      "Resource": [
+        "arn:aws:s3:::<BUCKET>",
+        "arn:aws:s3:::<BUCKET>/*"
+      ]
+    },
+    {
+      "Effect": "Allow",
+      "Action": "s3:DeleteObject",
+      "Resource": "arn:aws:s3:::<BUCKET>/locks/*"
+    },
+    {
+      "Effect": "Allow",
+      "Action": [
+        "s3:ListBucket",
+        "s3:GetBucketLocation"
+      ],
+      "Resource": "arn:aws:s3:::<BUCKET>"
+    }
+  ]
+}