Hey @mathewgries, good point. Let me share 1 example. If you want the users to be able to upload files to an S3 bucket directly, you’d grant the S3 upload permission to users the identity pool.
Frank
09/24/2021, 6:04 PM
ie.
Copy code
action: s3:*
resource: arn:aws:s3:::bucket_name/*
Frank
09/24/2021, 6:04 PM
This would allow the user to upload/remove ANY files in the S3 bucket.
Frank
09/24/2021, 6:05 PM
Now, if you want a user to be able to upload/remove ONLY his files, you want to change the permission to: