How should I configure the IAM policy so that it restricts access to only a specific prefix within a bucket?

[mroldx]

Create a new IAM user and attach the minimum policy below (only allows listing rustfs/):

bucket: rustfs
folder: rustfs

{ "Version": "2012-10-17", "Statement": [ { "Sid": "AllowGetLocation", "Effect": "Allow", "Action": "s3:GetBucketLocation", "Resource": "arn:aws:s3:::rustfs" }, { "Sid": "AllowListBodeng", "Effect": "Allow", "Action": "s3:ListBucket", "Resource": "arn:aws:s3:::rustfs", "Condition": { "StringLike": { "s3:prefix": [ "rustfs/", "rustfs/*" ] } } }, { "Sid": "AllowReadWriteBodeng", "Effect": "Allow", "Action": [ "s3:GetObject" ], "Resource": "arn:aws:s3:::rustfs/rustfs/*" } ] }

How should I configure the IAM policy so that it restricts access to only a specific prefix within a bucket?

[loverustfs]

Same as : #1399