ECS: How to create a bucket policy to allow access to a specific bucket for only one IP address.

Summary: This KB article explains how to create a bucket policy to allow access to a specific bucket for only one IP address.

This article applies to This article does not apply to This article is not tied to any specific product. Not all product versions are identified in this article.
Check out other resources

Instructions

1. Connect to the user interface under manage>Buckets>Edit>Edit Policy.

Connect to the user interface under manage>Buckets>Edit>Edit Policy.

 

2. After changing your bucket name and IP address as necessary, add the following bucket policy .

{
  "Version": "2012-10-17",
  "Id": "null",
  "Statement": [
    {
      "Condition": {
        "NotIpAddress": {
          "aws:SourceIp": [
            "x.x.x.x"
          ]
        }
      },
      "Action": "s3:*",
      "Resource": "Islam-Bucketpolicy-test",
      "Effect": "Deny",
      "Principal": "*"
    }
  ]
}

3. Test the bucket policy. There should be 403 errors if attempted with another IP address.

Affected Products

ECS, ObjectScale
Article Properties
Article Number: 000311063
Article Type: How To
Last Modified: 26 Sept 2025
Version:  2
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.