HTML Code
<!DOCTYPE html>
<html lang="en">
<head>
  <meta charset="UTF-8">
  <title>Least-privilege bucket policy</title>
  <style>
    body { font-family: system-ui, sans-serif; padding: 1.5rem; background: #f1f5f9; color: #0f172a; }
    h1 { margin: 0 0 0.35rem; font-size: 1.35rem; }
    p.lead { margin: 0 0 1.25rem; color: #475569; }
    .grid { display: grid; gap: 1.25rem; grid-template-columns: 1fr; max-width: 720px; }
    @media (min-width: 720px) {
      .grid { grid-template-columns: 1fr 1fr; }
    }
    .terminal {
      background: #0f172a;
      color: #e2e8f0;
      border-radius: 0.75rem;
      overflow: hidden;
      box-shadow: 0 10px 30px rgba(15, 23, 42, 0.2);
    }
    .terminal-bar {
      display: flex;
      align-items: center;
      gap: 0.4rem;
      padding: 0.6rem 0.9rem;
      background: #1e293b;
      border-bottom: 1px solid #334155;
    }
    .terminal-bar span {
      width: 11px;
      height: 11px;
      border-radius: 50%;
      display: inline-block;
    }
    .dot-red { background: #ef4444; }
    .dot-yellow { background: #f59e0b; }
    .dot-green { background: #22c55e; }
    .terminal-title {
      margin-left: 0.5rem;
      font-size: 0.8rem;
      color: #94a3b8;
      font-family: ui-monospace, monospace;
    }
    .terminal-body {
      padding: 1rem 1.1rem;
      font-family: ui-monospace, "Cascadia Code", monospace;
      font-size: 0.82rem;
      line-height: 1.55;
      white-space: pre-wrap;
      color: #93c5fd;
    }
    .breakdown {
      background: #fff;
      border: 2px solid #e2e8f0;
      border-radius: 0.75rem;
      padding: 1.1rem 1.2rem;
    }
    .breakdown h2 { margin: 0 0 0.75rem; font-size: 1rem; }
    .breakdown dl { margin: 0; }
    .breakdown dt { font-weight: 700; color: #0f172a; margin-top: 0.6rem; }
    .breakdown dd { margin: 0.15rem 0 0; color: #475569; }
    .breakdown .safe { margin-top: 0.9rem; padding-top: 0.75rem; border-top: 1px dashed #cbd5e1; color: #15803d; font-weight: 600; font-size: 0.88rem; }
  </style>
</head>
<body>
  <h1>Least-privilege S3 bucket policy</h1>
  <p class="lead">Public read on one prefix only&mdash;everything else in the bucket stays private.</p>

  <div class="grid">
    <div class="terminal">
      <div class="terminal-bar">
        <span class="dot-red"></span>
        <span class="dot-yellow"></span>
        <span class="dot-green"></span>
        <span class="terminal-title">bucket-policy.json</span>
      </div>
      <div class="terminal-body">{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "PublicReadOnlyForAssets",
      "Effect": "Allow",
      "Principal": "*",
      "Action": "s3:GetObject",
      "Resource": "arn:aws:s3:::codetofun-assets/public/*"
    }
  ]
}</div>
    </div>

    <div class="breakdown">
      <h2>Plain-English breakdown</h2>
      <dl>
        <dt>Effect: Allow</dt>
        <dd>This statement grants access rather than denying it.</dd>
        <dt>Principal: *</dt>
        <dd>Anyone, including unauthenticated requests, matches this statement.</dd>
        <dt>Action: s3:GetObject</dt>
        <dd>Only reading an object&mdash;no listing, writing, or deleting.</dd>
        <dt>Resource: codetofun-assets/public/*</dt>
        <dd>Only objects under the <code>public/</code> prefix in one bucket.</dd>
      </dl>
      <p class="safe">Everything outside public/* stays private by default.</p>
    </div>
  </div>
</body>
</html>
Lines: 0 | Characters: 0
Live Preview Auto-refresh on Run
AWS Introduction — A Least-Privilege S3 Bucket Policy
