How do I create an AWS IAM policy in JSON format?

How do I create an AWS IAM policy in JSON format?

To create an AWS IAM policy in JSON format, you need to define the policy structure including Version, Statement, and Effect.

Can you show me an example of a simple policy?

Sure! Here's a simple policy that allows S3 read access:

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": "s3:GetObject",
      "Resource": "arn:aws:s3:::example-bucket/*"
    }
  ]
}

What does each part of the policy mean?

The 'Version' specifies the policy language version. 'Statement' contains the permissions, where 'Effect' can be 'Allow' or 'Deny', 'Action' specifies the actions allowed, and 'Resource' defines the resources affected.

How can I test this policy?

You can test the policy by attaching it to an IAM user or role and then using the AWS CLI or Management Console to attempt the specified actions.