deny http s3 access
"s3:GetBucketAcl"
]
},
+ {
+ "Sid": "ArtifactBucketDeliveryDenyHttp",
+ "Effect": "Deny",
+ "Principal": "*",
+ "Action": "s3:GetObject",
+ "Resource": "arn:aws:s3:::/*",
+ "Condition": {
+ "Bool": {
+ "aws:SecureTransport": "false"
+ }
+ }
+ },
{
"Sid": "ArtifactBucketDelivery",
"Effect": "Allow",
"Version": "2012-10-17",
"Statement": [
{
- "Sid": "ELBAccessLogs20130930",
+ "Sid": "ELBAccessLogsAllowAws",
"Effect": "Allow",
"Resource": {
"Fn::Join": [
"Action": [
"s3:PutObject"
]
+ },
+ {
+ "Sid": "ELBAccessLogsDenyHttp",
+ "Effect": "Deny",
+ "Principal": "*",
+ "Action": "s3:GetObject",
+ "Resource": "arn:aws:s3:::/*",
+ "Condition": {
+ "Bool": {
+ "aws:SecureTransport": "false"
+ }
+ }
}
]
}
