S3 IAM Policy Generator

Build a least-privilege AWS policy for a single S3 bucket. Pick the bucket, an optional folder prefix and only the actions you need - the JSON updates instantly. Everything runs in your browser; nothing is sent anywhere.

IAM policy (JSON)

Least privilege by default. The policy is scoped to the single bucket you name (and one prefix, if you add one). Bucket-level actions like ListBucket target the bucket ARN; object actions like GetObject target the objects under it. Grant only the boxes you actually use.

How to use it

  1. Type your bucket name (and an optional folder prefix to lock access to one subtree).
  2. Tick only the permissions you need. For a typical FTPie connection, leave all four on.
  3. Keep IAM user / role policy selected to attach it to a user in the AWS console (IAM → Users → Add permissions → Create inline policy → JSON), or switch to bucket policy to attach it to the bucket itself.
  4. Copy the JSON and paste it in.

Using it with FTPie

FTPie connects Amazon S3 and any S3-compatible bucket as an ordinary storage account. Create a dedicated IAM user, attach the policy above (all four permissions), generate an access key, and paste the key ID and secret into FTPie's Amazon S3 wizard - your buckets show up next to your other storage. If a key is limited to one bucket, put its name in the Bucket field.