Amazon Simple Storage Service
Developer Guide (API Version 2006-03-01)
Print this pageEmail this pageGo to the ForumsView the PDFShare this page on TwitterShare this page on FacebookBookmark this page on DeliciousSubmit this page to RedditSubmit this page to DiggDid this page help you?  Yes  No   Tell us about it...

Architectural Overview

The following figure and table describe the main components that interact to provide access control for your resources.

Architectural Overview

You, the resource owner.

Your resources (contained within the AWS service; e.g., Amazon S3 buckets or objects).

Your policies.

In Amazon S3 there is only one policy per bucket. Amazon S3 provides an API that enables to you to upload and manage your bucket policy. For information about the content of the policies, see How to Write a Policy.

Requesters and their incoming requests to the AWS service.

The access policy language evaluation code.

This is the set of code within the AWS service that evaluates incoming requests against the applicable policies and determines whether the requester is allowed access to the resource. For information about how the service makes the decision, see Evaluation Logic.

For the typical process of how the components work together, see Using the Access Policy Language.