Policy to allow specific outside access to S3 buckets?

This post has been de-listed

It is no longer included in search results and normal feeds (front page, hot posts, subreddit posts, etc). It remains visible only via the author's post history.

Post Flair (click to view more posts with a particular flair)

technical question

Post Body

Upfront, I know exceedingly little about access policies in AWS, so go slow please.

Here's the situation:

I have 3 S3 buckets (owtv-main, owtv-hst, and owtv-dyn) that I need to be accessible from my CDN's IP addresses and one IAM user, but block all access to everyone else. I know this is done through a Policy, but that's about the extent of my knowledge.

Additionally, I need a way to update the list of allowed IP addresses automatically, as my CDN occasionally updates them. I have code in place to grab the CDN's IP list, but can it be updated on the Policy side through the command line client?

Author

Account Strength

100%

Account Age

10 years

Verified Email

Yes

Verified Flair

Total Karma

19,425

Link Karma

6,051

Comment Karma

13,278

Profile updated: 5 days ago

Posts updated: 7 months ago

CWinthrop

Subreddit

r/aws

Post Details

We try to extract some basic information from the post title. This is not always successful or accurate, please use your best judgement and compare these values to the post title and body for confirmation.

Posted: 3 years ago
Reddit URL: View post on reddit.com
External URL: reddit.com/r/aws/comment...