Bucket access policies allow you to define precise, S3-compatible access control for one bucket. They are evaluated after organization access policies. See Manage Bucket Policies for examples and further information. This data source provides a type-safe data structure for creating an S3-compatible JSON bucket policy.
Example usage
Schema
Optional
id (String) An optional policy identifier
statement (Block List) The main policy element that defines the access rules for buckets and objects. Multiple statement blocks can be specified. (see below for nested schema)
version (String) The policy version, e.g. "2012-10-17"
Read-Only
json (String) The rendered policy document as JSON
Nested Schema for statement
Optional:
action (List of String) List of action strings, e.g. ["s3:PutObject"]
condition (Map of Map of String) Map of condition operators to JSON expressions
effect (String) Allow or Deny
principal (Map of List of String) Map of principal types to identifiers. For CoreWeave principals, format each identifier as described in bucket policies.
resource (List of String) List of resource ARNs, e.g. ["arn:aws:s3:::bucket/*"]
sid (String) An optional statement identifier
Last modified on October 14, 2026