title: AWS IAM S3 Policy
body: <p>I currently have AWS Policy that grants a user account access to create new users with limited access to IAM and S3</p>
  
  <p>How can I reduce the permission of this user further so the user is unable to list all the S3 buckets on my account </p>
  
  <pre><code>{
      "Version": "2012-10-17",
      "Statement": [
          {
              "Sid": "VisualEditor0",
              "Effect": "Allow",
              "Action": [
                  "iam:PutUserPolicy",
                  "iam:GetUser",
                  "iam:CreateUser",
                  "iam:CreateAccessKey"
              ],
              "Resource": "*"
          },
          {
              "Effect": "Allow",
              "Action": "s3:*",
              "Resource": "*"
          },
          {
              "Effect": "Allow",
              "Action": [
                  "cloudformation:*"
              ],
              "Resource": "*"
          }
      ]
  }
  
  </code></pre>