> ## Knowledge Base Index
> Fetch the complete knowledge base index at: https://wiki.leviia.com/sitemap.xml
> Use this file to discover available pages before exploring further.
> Pure-Markdown content can be obtained by appending a '.md' suffix to the content URLs listed in the sitemap (without the trailing slash).

# S3cmd: protect bucket access based on IP address

## Prerequisites
* [Have configured s3cmd on your computer](https://wiki.leviia.com/en/article/s3cmd-configuration-and-use-hiwyiq/)

| S3 - IP-based bucket access protection
It is possible to protect bucket access based on IP address.
This can be achieved by modifying the policy associated with the bucket.

## Setting up IP protection
Create a file on your local machine containing the following lines:

```json
{
    "Version": "2012-10-17",
    "Id": "S3PolicyIPRestrict",
    "Statement": [
        {
            "Sid": "IPAllow",
            "Effect": "Deny",
            "Principal":{
                "AWS": "*"
            },
            "Action": "s3:*",
            "Resource": [
                "arn:aws:s3:::<bucket_name>",
                "arn:aws:s3:::<bucket_name>/*"
            ],
            "Condition": {
                "NotIpAddress": {
                    "aws:SourceIp": "xx.xx.xx.xx/xx"
                }
            }
        }
    ]
}

```

Apply policy :

```bash
s3cmd setpolicy /path/from/file/file_name s3://<bucket_name>
```


Check the policy: 

```bash
s3cmd info s3://<nom_du_bucket>
```

Delete policy:

```bash
s3cmd delpolicy s3://<nom_du_bucket>
```