Example: Public Read Policy

Bash

{
   "Version": "2012-10-17",
   "Statement":[
      {
         "Sid": "PublicReadGetObject",
         "Principal": "*",
         "Effect":"Allow",
         "Action": [
             "s3:GetObject"
         ],
         "Resource": [
             "arn:aws:s3::$tenant:$bucket/*"
         ]
      }
   ]
}