1


{
  "Effect": "Allow",
  "Principal": "*",
  "Action": "s3:*",
  "Resource": [
    "arn:aws:s3:::my-bucket",
    "arn:aws:s3:::my-bucket/*"
  ],
  "Condition": {
    "IpAddress": {
      "aws:SourceIp": [
        "203.0.113.10/32",
        "203.0.113.20/32"
      ]
    }
  }
}




2


aws s3api get-bucket-policy \
  --bucket 버킷이름 \
  --query Policy \
  --output text


aws s3api get-bucket-policy \
  --bucket 버킷이름 \
  --query Policy \
  --output text | jq .




aws s3api get-bucket-policy \
  --bucket 버킷이름 \
  --query Policy \
  --output text | jq '.. | objects | select(has("aws:SourceIp"))'