Orden en carpetas

2022-08-31 14:45:35 +02:00
parent b6f91affe0
commit 9a4b4d3365
10 changed files with 0 additions and 0 deletions
--- a/DataExchange/denegarAccesoS3noCuentaMenosAWSdataExchange.json
+++ b/DataExchange/denegarAccesoS3noCuentaMenosAWSdataExchange.json
@@ -0,0 +1,44 @@
+{
+  "Version": "2012-10-17",
+  "Statement": [
+    {
+      "Sid": "DenyAllAwsReourcesOutsideAccountExceptAmazonS3",
+      "Effect": "Deny",
+      "NotAction": [
+        "s3:GetObject",
+        "s3:PutObject",
+        "s3:PutObjectAcl"
+      ],
+      "Resource": "*",
+      "Condition": {
+        "StringNotEquals": {
+          "aws:ResourceAccount": [
+            "111122223333"
+          ]
+        }
+      }
+    },
+    {
+      "Sid": "DenyAllS3ResourcesOutsideAccountExceptDataExchange",
+      "Effect": "Deny",
+      "Action": [
+        "s3:GetObject",
+        "s3:PutObject",
+        "s3:PutObjectAcl"
+      ],
+      "Resource": "*",
+      "Condition": {
+        "StringNotEquals": {
+          "aws:ResourceAccount": [
+            "111122223333"
+          ]
+        },
+        "ForAllValues:StringNotEquals": {
+          "aws:CalledVia": [
+            "dataexchange.amazonaws.com"
+          ]
+        }
+      }
+    }
+  ]
+}