User guide

.withResources(new S3ObjectResource(myBucketName, "*"));

Statement allowRestrictedWriteStatement = new Statement(Effect.Allow)

.withPrincipals(new Principal("123456789"), new Principal("876543210"))

.withActions(S3Actions.PutObject)

.withResources(new S3ObjectResource(myBucketName, "*"));

Policy policy = new Policy()

.withStatements(allowPublicReadStatement, allowRestrictedWriteStatement);

AmazonS3 s3 = new AmazonS3Client(myAwsCredentials);

s3.setBucketPolicy(myBucketName, policy.toJson());

Amazon SQS Example

One common use of policies is to authorize an Amazon SQS queue to receive messages from an Amazon

SNS topic.

* This policy allows an SNS topic to send messages to an SQS queue.

* You can find your SNS topic's ARN through the SNS getTopicAttributes opera

tion.

Policy policy = new Policy().withStatements(

new Statement(Effect.Allow)

.withPrincipals(Principal.AllUsers)

.withActions(SQSActions.SendMessage)

.withConditions(ConditionFactory.newSourceArnCondition(myTopicArn)));

Map queueAttributes = new HashMap();

queueAttributes.put(QueueAttributeName.Policy.toString(), policy.toJson());

AmazonSQS sqs = new AmazonSQSClient(myAwsCredentials);

sqs.setQueueAttributes(new SetQueueAttributesRequest(myQueueUrl, queueAttrib

utes));

Amazon SNS Example

Some services offer additional conditions that can be used in policies. Amazon SNS provides conditions

for allowing or denying subscriptions to SNS topics based on the protocol (e.g., email, HTTP, HTTPS,

SQS) and endpoint (e.g., email address, URL, SQS ARN) of the request to subscribe to a topic.

* This SNS condition allows you to restrict subscriptions to an Amazon SNS

topic

* based on the requested endpoint (email address, SQS queue ARN, etc.) used

when

* someone tries to subscribe to your SNS topic.

Condition endpointCondition =

SNSConditionFactory.newEndpointCondition("*@mycompany.com");

Policy policy = new Policy().withStatements(

new Statement(Effect.Allow)

.withPrincipals(Principal.AllUsers)

Version v1.0.0

AWS SDK for Java Developer Guide

Access Control Policies