CCloudSecurityService_AmazonS3::GetDefaultBucketControlPolicy

function GetDefaultBucketControlPolicy($bucket, $prefix)
{
	return array(
		'Statement' => array(
			array(
				'Effect' => 'Allow',
				'Action' => array(
					's3:DeleteObject',
					's3:GetObject',
					's3:PutObject',
					's3:PutObjectAcl'
				),
				'Resource' => 'arn:aws:s3:::'.$bucket.'/'.$prefix.'/*',
			),
			array(
				'Effect' => 'Allow',
				'Action' => array(
					's3:ListBucket'
				),
				'Resource' => 'arn:aws:s3:::'.$bucket,
				'Condition' => array(
					'StringLike' => array(
						's3:prefix' => $prefix."/*"
					),
				),
			),
		),
	);
}