What are some examples of IAM policies?

Can you provide some examples of IAM policies?

Sure! IAM policies are used to define permissions for AWS resources. For example, a policy can allow users to access S3 buckets.

What would a policy look like for allowing read access to an S3 bucket?

Here's a simple example:

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": "s3:GetObject",
      "Resource": "arn:aws:s3:::example-bucket/*"
    }
  ]
}

Can I restrict access to specific IP addresses?

Yes, you can use conditions in your policy to restrict access based on IP addresses. Would you like an example?

Yes, please!

Here's an example that restricts access to a specific IP:

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": "s3:GetObject",
      "Resource": "arn:aws:s3:::example-bucket/*",
      "Condition": {
        "IpAddress": {
          "aws:SourceIp": "192.0.2.0/24"
        }
      }
    }
  ]
}