AWS Policy Creation

1. Go to your AWS console dashboard.
2. Search and click IAM



3. Click Policies from the menu on the left.
4. Click Create policy.
5. Go to the JSON tab.
6. Replace the existing JSON code with the following:

{

"Version": "2012-10-17",

"Statement": [

{

"Action": [

"s3:Get*",

"s3:List*",

"s3:Put*",

"s3:Delete*",

"s3:CreateBucket",

"iam:List*",

"iam:Get*",

"cloudtrail:LookupEvents",

"cloudtrail:GetTrailStatus",

"cloudtrail:DescribeTrails",

"cloudtrail:ListTags",

"cloudtrail:GetEventSelectors",

"config:Get*",

"config:Describe*",

"config:Deliver*",

"config:List*"

],

"Resource": "*",

"Effect": "Allow"

}

]

}

7. Click Review policy.
8. Name the new policy.
9. Click Create policy.

Your new policy will be created.

Please keep your policy name later for role creation.

For the purpose behind the AWS services being used to create the custom policy, please refer to Appendix A: Amazon Policy Usage.