s3 官网参考文档（S3存储桶策略样例）

1、最佳实践
S3最佳安全实践

https://docs.aws.amazon.com/zh_cn/AmazonS3/latest/userguide/security-best-practices.html#security-best-practices-prevent

2、功能讲解
阻止对您的 Amazon S3 存储的公有访问

https://docs.aws.amazon.com/zh_cn/AmazonS3/latest/userguide/access-control-block-public-access.html

为您的桶控制对象所有权和禁用ACL

https://docs.aws.amazon.com/zh_cn/AmazonS3/latest/userguide/about-object-ownership.html#object-ownership-changes

3、S3存储桶策略样例
桶策略示例

https://docs.aws.amazon.com/zh_cn/AmazonS3/latest/userguide/example-bucket-policies.html

4、S3存储桶级别的API操作代码样例
通过AWSCLI或者SDK为S3桶配置阻止公有访问设置的例子

https://docs.aws.amazon.com/zh_cn/AmazonS3/latest/userguide/configuring-block-public-access-bucket.html

通过AWSCLI或者SDK为现有桶设置对象所有权的例子

https://docs.aws.amazon.com/zh_cn/AmazonS3/latest/userguide/object-ownership-existing-bucket.html

Java等语言使用SDK将S3存储桶策略添加到存储桶的代码样例

https://docs.aws.amazon.com/zhcn/AmazonS3/latest/userguide/examples3PutBucketPolicysection.html

Python Boto3 SDK创建存储桶代码样例

https://boto3.amazonaws.com/v1/documentation/api/latest/reference/services/s3/client/create_bucket.html

Python Boto3 SDK关闭存储桶Block Public Access开关代码样例

https://boto3.amazonaws.com/v1/documentation/api/latest/reference/services/s3/client/deletepublicaccess_block.html