All Documents
Current Document

Content is empty

If you don't find the content you expect, please try another search term

Documentation

Allow IAM users to access resources only by using specific IP addresses

Last updated:2021-04-28 11:04:15

The following policy grants KS3 permissions. However, all requests must originate from the specified IP address range.

{
  "Version":"2015-11-01",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "ks3:GetObject",
        "ks3:ListBucket"
      ],
      "Resource": [
        "krn:ksc:ks3:::example_bucket",
        "krn:ksc:ks3:::example_bucket/*"
      ],
      "Condition": {
        "IpAddress": {
          "ksc:SourceIp": [
            "54.240.144.0/24"
          ]
        },
        "NotIpAddress": {
          "ksc:SourceIp": [
            "54.240.144.188/32"
          ]
        }
      }
    }
  ]
}
On this page
Pure ModeNormal Mode

Pure Mode

Click to preview the document content in full screen
Feedback