-
Hello br456,
The first statement (“Action”: [“s3:Get*”, “s3:List*”] with “Resource”: “*”) already covers the read and list permissions across all buckets, including team-palawan.
The second statement simply adds the ability to write objects into the team-palawan bucket. So the reading capability doesn’t come from PutObject. It’s provided by the Get* actions in the first statement.
Let me know if this helps.
Regards,
JR @ Tutorials Dojo
