{
    "RoleName": "S3Manage",
    "PolicyName": "s3-readwrite-masos-buckets",
    "PolicyDocument": {
        "Version": "2012-10-17",
        "Statement": [
            {
                "Sid": "VisualEditor0",
                "Effect": "Allow",
                "Action": [
                    "s3:DeleteObjectTagging",
                    "s3:DeleteObjectVersion",
                    "s3:GetObjectVersionTagging",
                    "s3:RestoreObject",
                    "s3:PutObjectVersionTagging",
                    "s3:DeleteObjectVersionTagging",
                    "s3:GetObjectVersionAttributes",
                    "s3:GetObjectVersionTorrent",
                    "s3:PutObject",
                    "s3:GetObject",
                    "s3:GetObjectTorrent",
                    "s3:GetObjectTagging",
                    "s3:PutObjectTagging",
                    "s3:DeleteObject",
                    "s3:GetObjectVersion"
                ],
                "Resource": "arn:aws:s3:::masos-XXXXXXX-*/*"
            },{
                "Sid": "VisualEditor1",
                "Effect": "Allow",
                "Action": [
                    "s3:GetLifecycleConfiguration",
                    "s3:GetBucketTagging",
                    "s3:GetBucketWebsite",
                    "s3:GetBucketLogging",
                    "s3:CreateBucket",
                    "s3:ListBucket",
                    "s3:GetAccelerateConfiguration",
                    "s3:GetBucketVersioning",
                    "s3:PutBucketCORS",
                    "s3:GetBucketAcl",
                    "s3:DeleteBucketPolicy",
                    "s3:GetBucketPolicy",
                    "s3:GetReplicationConfiguration",
                    "s3:GetBucketObjectLockConfiguration",
                    "s3:GetEncryptionConfiguration",
                    "s3:PutBucketTagging",
                    "s3:GetBucketRequestPayment",
                    "s3:GetBucketCORS",
                    "s3:PutBucketAcl",
                    "s3:PutBucketPolicy",
                    "s3:PutBucketObjectLockConfiguration",
                    "s3:GetBucketLocation",
                    "s3:DeleteBucket",
                    "s3:PutBucketVersioning"
                ],
                "Resource": "arn:aws:s3:::masos-XXXXXXX-*"
            }
        ]
    }
}