Restrictive S3 bucket permissions

If you have an existing bucket but don't wish to give permission for DocEvent.io to access the entire bucket, you are able to limit the paths that DocEvent has access to.

First, you can configure the bucket access like so:

{
    "Statement": [
        {
            "Action": [
                "s3:GetObject*",
                "s3:PutObject*",
                "s3:DeleteObject"
            ],
            "Resource": [
                "arn:aws:s3:::temp-test-ftp-bucket-1/docevent1/*",
                "arn:aws:s3:::temp-test-ftp-bucket-1/docevent2/*"
            ],
            "Effect": "Allow"
        },
        {
            "Action": [
                "s3:GetBucketLocation",
                "s3:ListBucket"
            ],
            "Resource": [
                "arn:aws:s3:::temp-test-ftp-bucket-1"
            ],
            "Effect": "Allow"
        }
    ]
}