Quay Enterprise S3 Bucket Policy

The following policy is the minimum policy required when using the S3 storage engine with Quay Enterprise.

In the string arn:aws:s3:::bucket-name, bucket-name should be replaced with the S3 bucket name.

{
 "Version":"2012-10-17",
 "Statement":[
 {
 "Effect":"Allow",
 "Action":[
 "s3:ListBucket",
 "s3:GetBucketLocation",
 "s3:ListBucketMultipartUploads",
 "s3:PutBucketCORS"
 ],
 "Resource":"arn:aws:s3:::bucket-name"
 },
 {
 "Effect":"Allow",
 "Action":[
 "s3:PutObject",
 "s3:GetObject",
 "s3:DeleteObject",
 "s3:ListMultipartUploadParts",
 "s3:AbortMultipartUpload"
 ],
 "Resource":"arn:aws:s3:::bucket-name/*"
 }
 ]
}