Slide 24
Slide 24 text
IAM
{
"Effect": "Deny",
"Principal": "*",
"Action": "s3:*",
"Resource": ["arn:aws:s3:::example-iceberg-bucket",
"arn:aws:s3:::example-iceberg-bucket/*"],
"Condition": {"ArnNotLike": {"aws:PrincipalArn": [
"arn:aws:iam::111122223333:role/snowflake-volume",
"arn:aws:iam::111122223333:role/your-admin"
]}}
}
24