```

    {
      "Version": "2012-10-11",
      "Id": "Policy1503119012324",
      "Statement": [{
        "Sid": "Stmt15031190096534",
        "Effect": "Deny",
        "Principal": "*",
        "Action": "*",
        "Resource": "arn:aws:s3:::mybucket/*",
        "Condition": {
          ここで特定のIAMユーザーを例外にしたい
        }
      }]
    }
    
```
CC BY-SA 3.0
2017-08-20T02:53:03.093
37346
2017-08-21T02:52:52.017
9149
question
aws amazon-s3
awsのpolicyの作り方を教えてください
`NotPrincipal` を使って IAMユーザの ARN を指定すれば良いと思います。  
ARNは`"arn:aws:iam::AWSアカウントID:user/IAMユーザ名"` という形式です。

```

    {
      "Id": "Policys3IamUserAccessControl",
      "Version": "2012-10-17",
      "Statement": [
        {
          "Sid": "mybucket01",
          "Action": "s3:*",
          "Effect": "Deny",
          "Resource": [ "arn:aws:s3:::mybucket" ],
          "NotPrincipal": {
            "AWS": [
              "arn:aws:iam::123456789012:user/take88" <- 例外IAMユーザ
            ]
          }
        }
      ]
    }
    
```
CC BY-SA 3.0
2017-08-21T02:52:52.017
37363
2017-08-21T02:52:52.017
5008
37346
answer