dmrpp-bucket-policy.json

{
    "Version": "2012-10-17",
    "Id": "DMR++ Ownership Testing",
    "Statement": [
        {
            "Sid": "Read Access OPeNDAP SIT",
            "Effect": "Allow",
            "Principal": {
                "AWS": [
                    "arn:aws:iam::595698832580:root"
                ]
            },
            "Action": [
                "s3:GetObject*",
                "s3:ListBucket"
            ],
            "Resource": [
                "arn:aws:s3:::dmrpp-sit-poc",
                "arn:aws:s3:::dmrpp-sit-poc/*"
            ],
            "Condition": {
                "StringEquals": {
                    "aws:PrincipalOrgID": "o-j2j2wd84pp"
                }
            }
        },
        {
            "Sid": "Write Access OPeNDAP SIT",
            "Effect": "Allow",
            "Principal": {
                "AWS": [
		    "arn:aws:iam::595698832580:root"
		]
            },
            "Action": [
                "s3:PutObject",
                "s3:DeleteObject"
            ],
            "Resource": "arn:aws:s3:::dmrpp-sit-poc/OPeNDAP/*",
            "Condition": {
                "StringEquals": {
                    "aws:PrincipalOrgID": "o-j2j2wd84pp"
                }
            }
        }
    ]
}