S3 bucket policy allow full access to a bucket and all its objects

Question

I wanted a bucket policy that allows access to all objects in the bucket and to do operations on the bucket itself.
Is there a way to do this? is there a way to specify a resource identifier that refers to the bucket itself and all its contained objects, in one shot?

Answer 1

Permissions against the Bucket are separate from permissions against Objects within the Bucket. So you have to grant permissions to both.
Write this code to combine bucket-level and object-level permissions:

{
  "Id": "BucketPolicy",
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "AllAccess",
      "Action": "s3:*",
      "Effect": "Allow",
      "Resource": [
         "arn:aws:s3:::my-bucket",
         "arn:aws:s3:::my-bucket/*"
      ],
      "Principal": "*"
    }
  ]
}

I hope this helps.