IAM & S3 Access Control Simulator

Identity Selection

Alice Hamilton

HR Manager

s3:GetObject s3:PutObject

Resources: company-documents/hr/*

Bob Chen

Marketing Specialist

s3:GetObject

Resources: company-documents/marketing/*

System Administrator

Admin

s3:*

Resources: company-documents/*

MFA Required

External Contractor

Cross-Account Access

s3:GetObject

Resources: company-documents/shared/*

Expires in 2 hours

Action

Resource Path

Multi-Factor Authentication

IP Address Restriction

No additional conditions active

No access attempts recorded. Click "Test Access" to see IAM policy evaluation results.

Define allowed actions (GetObject, PutObject, DeleteObject, etc.)

Specify which S3 buckets and paths can be accessed

Multi-Factor Authentication adds additional security layer

Limit access to specific network locations and ranges

Time-limited credentials that expire automatically

Access granted to users from different AWS accounts