Skip to main content
Last updated on

Bucket Policy

A bucket policy in S3 is a set of rules controlling access to the bucket and the data inside it. The Bucket Policy tab is a raw JSON editor — type the policy directly, and the portal validates the syntax as you type (a ✓/✗ icon appears in the top-right corner).

Bucket Policy tab - JSON editor

Apply templates​

The Áp dụng templates (Apply templates) dropdown in the top-right corner offers a few ready-made policies, for example:

  • Allow read access to all objects in a bucket
  • Restrict object access to a single IP range
  • Restrict bucket access to a specific IAM user
  • Only allow encrypted uploads (SSE-S3)

Bucket Policy templates dropdown

Picking a template overwrites the JSON editor immediately (nothing is saved to the bucket yet). Edit the parts you need (e.g. the bucket name inside Resource) before clicking Cập nhật (Update).

Remember to replace placeholders before saving

Templates use placeholders such as your-bucket-name in the Resource field — replace them with your real bucket name, otherwise the policy won't behave as expected.

Action buttons​

  • Format JSON — reformats the JSON for readability, without sending anything to the server.
  • Cập nhật (Update) — saves the current policy to the bucket.

There's no dedicated delete button on this tab — to remove the policy, clear the JSON box (leave it as {}) and click Cập nhật (Update).