Hi, Many thanks for this project, it's already proving to be very us

Hi, Thank you for your positive feedback :) <a href="https://docs.aws.amazon.c

s3 PolicyDocument about comformation HOT 2 CLOSED

stanb commented on May 28, 2024

s3 PolicyDocument

from comformation.

Comments (2)

stanb commented on May 28, 2024 1

Hi,
Thank you for your positive feedback :)
Policy document is a JSON. So you can combine json string and parse it with JToken.Parse().
To work with IAM policies you can create Amazon.Auth.AccessControlPolicy.Policy object from AWSSDK.Core, cast it to json string and wrap it with JToken.Parse method.
Something like this:

using Comformation;
using Comformation.IntrinsicFunctions;
using Comformation.S3.BucketPolicy;
using Newtonsoft.Json.Linq;
using Amazon.Auth.AccessControlPolicy;

...
var template = new Template
{
    Resources = new Resources
    {
        ...
        new BucketPolicyResource
        {
            LogicalId = "DeployBucketPolicy",
            Properties =
            {
                Bucket = Fn.Ref("DeployBucket"),
                PolicyDocument = JToken.Parse(new Policy {
                    Version = "2012-10-17",
                    Statements =
                    {
                        new Statement(Statement.StatementEffect.Allow)
                        {
                            Id = "PublicReadGetObject",
                            Principals = { new Principal("*") },
                            Actions = { new ActionIdentifier("s3:GetObject") },
                            Resources = 
                            {
                                new Resource(
                                    Fn.Join("", new List<Union<string, IntrinsicFunction>>
                                    {
                                        "arn:aws:s3:::", Fn.Ref("DeployBucket"), "/*"
                                    }).ToString())
                            }
                        }
                    }
                }.ToJson())
            }
        }
    }
};