title: S3 Policy to allow a user to Put, Get, Delete and modify permissions
body: <p>I'm working to create a policy document to allow a IAM users to S3 to a specific &quot;blog&quot; directory where they can create/edit/delete files as well as modify file permissions inside the bucket to global read so uploaded files can be made public on a blog. Here is what I have so far, only issue is the policy is not letting the user modify permissions.</p>
  <p>How can this policy be updated to allow the user to modify permissions to global read access?</p>
  <pre><code>{
    &quot;Version&quot;: &quot;2012-10-17&quot;,
    &quot;Statement&quot;: [
      {
        &quot;Effect&quot;: &quot;Allow&quot;,
        &quot;Action&quot;: [&quot;s3:ListAllMyBuckets&quot;],
        &quot;Resource&quot;: &quot;arn:aws:s3:::*&quot;
      },
      {
        &quot;Effect&quot;: &quot;Allow&quot;,
        &quot;Action&quot;: [
          &quot;s3:ListBucket&quot;,
          &quot;s3:GetBucketLocation&quot;
        ],
        &quot;Resource&quot;: &quot;arn:aws:s3:::blog&quot;
      },
      {
        &quot;Effect&quot;: &quot;Allow&quot;,
        &quot;Action&quot;: [
          &quot;s3:PutObject&quot;,
          &quot;s3:GetObject&quot;,
          &quot;s3:DeleteObject&quot;
        ],
        &quot;Resource&quot;: &quot;arn:aws:s3:::blog/*&quot;
      }
    ]
  }
  </code></pre>