---
title: "Discussion on \"Writing a Custom IAM Policy from Scratch\" | Hashnode"
description: "Discussion on \"Writing a Custom IAM Policy from Scratch\". On Day 1 I used an AWS managed policy (ReadOnlyAccess). It works, but it's broad. Today I wrote my own policy that allows exactly one thing: reading one S3 bucket and nothing else. That's least privil"
url: "https://hashnode.com/posts/writing-a-custom-iam-policy-from-scratch/6ae502968b490ff90c32fa45"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [Writing a Custom IAM Policy from Scratch](https://sishodiarobin.hashnode.dev/writing-a-custom-iam-policy-from-scratch?utm_source=hashnode&utm_medium=feed)

On Day 1 I used an AWS managed policy (ReadOnlyAccess). It works, but it's broad. Today I wrote my own policy that allows exactly one thing: reading one S3 bucket and nothing else. That's least privil

Oct 30 · 2 min read · sishodiarobin.hashnode.dev  
Updated 6d ago  
Read the article

-   [#aws](https://hashnode.com/tag/aws)
-   [#iam](https://hashnode.com/tag/iam)
-   [#120daysofaws](https://hashnode.com/tag/120daysofaws)
-   [#cloudsecurity](https://hashnode.com/tag/cloudsecurity)
-   [#devops](https://hashnode.com/tag/devops)

## Written by

[Robin Sishodia](https://hashnode.com/@Sishodia)

@Sishodia · India

  
[View profile](https://hashnode.com/@Sishodia)

AWS DevOps Engineer – Professional | Salesforce Admin (4x certified) | Writing about Kubernetes, Terraform & CI/CD

I moved from 4+ years in operations into Salesforce administration and AWS Cloud/DevOps, and I write about what I learn while building things. I hold 11 certifications, including AWS Certified DevOps Engineer – Professional, Salesforce Platform Administrator I & II, Platform App Builder, Agentforce Specialist, and GitHub Actions. I'm a Trailhead Double Star Ranger with 250+ badges. Here I post practical guides on Kubernetes, Docker, Terraform, CI/CD and DevSecOps, plus Salesforce DevOps with Copado and GitHub Actions. I'm open to Salesforce Admin, CRM support and DevOps/Cloud roles and can join immediately.

## Responses

Markdown supported · ⌘↵ to post

No responses yet.