What are the minimum permissions required for Amazon's (AWS) S3 documents to work with ForeFlight.

The minimum permissions required to integrate your AWS S3 bucket with ForeFlight can be found in the following Identity and Access Management (IAM) policies:

OPTION 1: If your IAM policy action is set to ListAllMyBuckets, then your policy should look like this:

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "BucketLevelPermissions",
      "Effect": "Allow",
      "Action": [
        "s3:ListAllMyBuckets"
      ],
      "Resource": "*"
    },
    {
       "Sid": "ObjectLevelPermissions",
       "Effect": "Allow",
       "Action": [
         "s3:ListBucket",
         "s3:GetBucketLocation",
         "s3:GetObject",
         "s3:GetObjectVersion",
         "s3:GetBucketAcl"
      ],
      "Resource": [
        "arn:aws:s3:::<foreflight_bucket_name>",
        "arn:aws:s3:::foreflight_bucket_name>/*"
      ]
    }
  ]
}

OPTION 2: If your IAM policy action is set to ListBucket instead of ListAllMyBuckets, then your policy should look like this:

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "BucketLevelPermissions",
      "Effect": "Allow",
      "Action": "s3:ListBucket",
      "Resource": "arn:aws:s3:::<foreflight_bucket_name>"
    },
    {
      "Sid": "ObjectLevelPermissions",
      "Effect": "Allow",
      "Action": [
        "s3:ListBucket",
        "s3:GetBucketLocation",
        "s3:GetObject",
        "s3:GetObjectVersion",
        "s3:GetBucketAcl"
      ],
      "Resource": [
        "arn:aws:s3:::<foreflight_bucket_name>",
        "arn:aws:s3:::<foreflight_bucket_name>/*"
      ]
    }
  ]
}