• Amazon S3 Buckets - Quick Overview
• How to create an Amazon S3 Bucket
• How to browse an Amazon S3 Bucket
• How to delete an Amazon S3 Bucket
• How to edit Amazon S3 Bucket Policies

Bucket Policies allow you to create conditional rules for managing access to your buckets and files. With bucket policies, you can also define security rules that apply to more than one file, including all files or a subset of files within a bucket. This makes updating and managing permissions easier!

To Edit Amazon S3 Policies:

1. Click Buckets -> Edit Bucket Policies.
   You can also use Ctrl+O keyboard shortcut to open Bucket Policies Editor.
2. 
   Bucket Policies Editor will open:
   Bucket Policies Editor allows you to Add, Edit and Delete Bucket Policies.
3. Enter valid Amazon S3 Bucket Policy.
   See some Examples of S3 Bucket Policies below and Access Policy Language References for more details.
4. Click Apply Bucket Policies.

How to grant public-read permission to anonymous users (i.e. to everyone)

{
  "Version":"2008-10-17",
  "Statement":[{
	"Sid":"AllowPublicRead",
		"Effect":"Allow",
	  "Principal": {
			"AWS": "*"
		 },
	  "Action":["s3:GetObject"],
	  "Resource":["arn:aws:s3:::bucket/*"
	  ]
	}
  ]
}

Don't forget to replace arn:aws:s3:::bucket/* with your bucket name.

How to grant full access for the users from specific IP addresses.

{
  "Version": "2008-10-17",
  "Id": "S3PolicyId1",
  "Statement": [
     {
         "Sid":"IPAllow",
         "Effect": "Allow",
         "Principal": {
            "AWS": "*"
         },
         "Action": "s3:*",
         "Resource": "arn:aws:s3:::bucket/*",
          "Condition" : {
             "IpAddress" : {
             "aws:SourceIp":"192.168.143.0/24"
             },
             "NotIpAddress" : {
             "aws:SourceIp":"192.168.143.188/32"
              }
          }
     },
     {
         "Sid":"IPDeny",
         "Effect": "Deny",
         "Principal": {
            "AWS": "*"
         },
         "Action": "s3:*",
         "Resource": "arn:aws:s3:::bucket/*",
         "Condition" : {
            "IpAddress" : {
            "aws:SourceIp":"10.1.2.0/24"
            }
         }
     }
  ]
}

Don't forget to replace arn:aws:s3:::bucket/* with your bucket name.

How to protect your amazon s3 files from hotlinking.

{ 
	"Version":"2008-10-17", 
	"Id":"preventHotLinking",
 
	"Statement":[ { 
	
		"Sid":"1", 
		"Effect":"Allow",
		"Principal": {
			"AWS":"*"
		},
		
		"Action":"s3:GetObject",
		"Resource":"arn:aws:s3:::your.bucket.name/*",
		
		"Condition":{
			
			"StringLike": { 
			
				"aws:Referer": [
					"http://yourwebsitename.com/*", 
					"http://www.yourwebsitename.com/*"
				]
			}
		}
	}]
}