> For the complete documentation index, see [llms.txt](https://karansingh.gitbook.io/aws-saa-c02/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://karansingh.gitbook.io/aws-saa-c02/mini-security-lesson/iam-for-s3-examples.md).

# IAM for S3 Resources

## **Bucket Name and Object Key Specified**

* The following ARN identifies the **`/developers/design_info.doc` object in the `examplebucket` bucket**.
  * **`arn:aws:s3:::examplebucket/developers/design_info.doc`**

## **Wildcards**

* You can **use wildcards as part of the resource ARN**.<br>
* You can use **wildcard characters (`*` and `?`)** within any ARN segment (the parts separated by colons).&#x20;

## Examples of Wildcards

* The following ARN uses the wildcard `*` in the relative-ID part of the ARN to **identify all objects in the `examplebucket` bucket**.
  * **`arn:aws:s3:::examplebucket/*`**<br>
* The following ARN uses `*` to **indicate all S3 resources (all S3 buckets and objects in your account)**.
  * **`arn:aws:s3:::*`**<br>
* The following ARN uses both wildcards, `*` and `?`, in the `relative-ID` part. It **identifies all objects in buckets such as `example1bucket`, `example2bucket`, `example3bucket`, and so on**.
  * **`arn:aws:s3:::example?bucket/*`**<br>