×

Create a Minimal IAM Policy

Follow these steps to craft a least-privilege IAM policy tailored to the AWS resources you want to analyze.

1. — In AWS Console → IAM → Policies → Create policy.
2. —Choose “JSON” tab and enter something like:

        {
          "Version": "2012-10-17",
          "Statement": [
            {
              "Effect": "Allow",
              "Action": [
                "s3:GetObject",
                "s3:ListBucket"
              ],
              "Resource": [
                "arn:aws:s3:::your-bucket-name",
                "arn:aws:s3:::your-bucket-name/*"
              ]
            }
          ]
        }
        

3. Review and name the policy, e.g., ReadOnlyS3Bucket.
4. Attach the policy to the user / group / role you created.
5. Test by logging in as that user and verifying they can view but not modify.