S3 Bucket Policy Generator | AWS Policy JSON

S3 bucket policy generator that builds AWS bucket policy JSON for public read, CloudFront OAC, cross-account access and TLS-only rules. Free, no signup. Designed specifically for developers and professionals, this free online generator runs entirely in your browser to process tasks quickly and securely. Enjoy unlimited usage with no data tracking and no registration required.

Also known as: s3 bucket policy generator · aws s3 policy generator · s3 policy generator online · s3 public read policy · cloudfront oac bucket policy · s3 cross account bucket policy · s3 deny insecure transport policy · aws bucket policy json example

devops and infrastructure tools

json tools

generators

Bucket Settings

Public read

Bucket name

Key prefix (optional)

Policy template

Resource ARNs

arn:aws:s3:::<bucket>

arn:aws:s3:::<bucket>/*

Bucket Policy JSON

About S3 Bucket Policy Generator

This S3 bucket policy generator builds a valid AWS bucket policy document from a bucket name, an optional key prefix and a template, covering public read access, CloudFront origin access control, cross-account reads and a TLS-only rule. It validates the bucket name against the S3 naming rules first, so the JSON you paste into the console is accepted the first time.

Key Features

Generates policy documents at the 2012-10-17 version with correct Sid, Effect, Principal, Action and Resource keys
Validates bucket names for length, character set, consecutive dots and IP-style names
Scopes object ARNs to an optional key prefix instead of the whole bucket
Adds a CloudFront OAC condition keyed on the distribution AWS:SourceArn
Appends an aws:SecureTransport deny statement on request
Shows both the bucket ARN and the object ARN before you generate

Use Cases

Lock a static assets bucket in us-east-1 so only your CloudFront distribution can read it
Grant a partner AWS account read access to one reporting prefix and nothing else
Add a TLS-only deny statement to satisfy a SOC 2 control on data in transit
Produce a reviewable policy diff before changing bucket access in a change ticket

Supported Formats

AWS IAM policy JSON (Version 2012-10-17)

Related Keywords

s3 bucket policy generator

aws s3 policy generator

s3 policy generator online

s3 public read policy

cloudfront oac bucket policy

s3 cross account bucket policy

s3 deny insecure transport policy

aws bucket policy json example

What is the difference between a bucket policy and an IAM policy?

A bucket policy is a resource-based policy attached to the bucket itself, so it must name a Principal and it can grant access to accounts other than your own. An IAM policy is identity-based, attaches to a user or role inside your account, and never names a Principal. Public access also depends on the bucket's Block Public Access settings, which override an Allow statement regardless of what the policy says.

No AWS credentials are used

This tool only assembles JSON text in your browser. It never calls the AWS API, never asks for credentials, and nothing you type is transmitted.

Liked this tool?

DevToolLab is free to use. If this generator saved you some time today, please consider supporting our work.

Buy us a coffee ☕

Frequently asked questions

What is S3 Bucket Policy Generator used for?

S3 bucket policy generator that builds AWS bucket policy JSON for public read, CloudFront OAC, cross-account access and TLS-only rules. Free, no signup.

Is S3 Bucket Policy Generator free to use?

Yes. S3 Bucket Policy Generator is completely free with no usage limits, and there is no paid tier required to use it.

Do I need an account to use S3 Bucket Policy Generator?

No. S3 Bucket Policy Generator works immediately in your browser with no signup, login, or email address required.

Related Tools

UUID Generator Online | Unique Identifier Generator

Generate universally unique identifiers (UUIDs) in multiple versions and formats. Perfect for database keys, API identifiers, and unique resource naming.

sql and database tools

encryption tools

Color Picker & Palette Generator | HEX RGB HSL Color Tool

Professional color picker tool with multiple format support, palette management, and advanced color manipulation features. Perfect for designers and developers.

color tools

random generators

Password Generator Online | Secure Random Passwords

Generate strong, secure passwords with customizable length and character sets. Cryptographically secure random generation for maximum security.

html tools

text tools

Text to Handwriting Converter Online | Handwriting Generator

Convert typed text into realistic handwriting online. Choose from 10 handwriting fonts, lined or grid paper, custom ink colors, and download as PNG or PDF.

text tools

color tools

More Tools You Might Like

Pastebin Online | Share Code & Text Snippets Free

Popular

Share code snippets, logs, and text with a shareable link. Syntax highlighting for 30+ languages, expiration controls, and password protection for Pro users.

text tools

password and key generators

math calculators

utilities

Use Tool

URL Tracker & Link Shortener | Track Clicks

Popular

Create short, trackable URLs with detailed click analytics. Track visitor location, devices, referrers, and more. Password protection & QR codes included.

text tools

password and key generators

url and link tools

networking

Use Tool

Webhook Receiver & Inspector | Test HTTP Webhooks

Popular

Generate a unique URL to easily test, receive and inspect HTTP webhooks in real-time. View request headers, query parameters, JSON payloads, and more.