I have a simple bucket that looks like images.mysite.com on my S3 and other buckets containing backups, etc.
images.mysite.com
I want to allow a specific user to be able
A nice simple solution we came up with is to block the user to login to the root directory. So they must login with remote path set to desired folder.
{ "Statement": [ { "Effect": "Allow", "Action": "s3:*", "Resource": "arn:aws:s3:::folder-name*", "Condition": {} } ] }