data/reusables/audit_log/create-s3-policy.md

1. Create a policy that allows {% data variables.product.company_short %} to write to the bucket. Copy the following JSON and replace EXAMPLE-BUCKET with the name of your bucket. {% data variables.product.prodname_dotcom %} requires only the permissions in this JSON.

   {
      "Version": "2012-10-17",
      "Statement": [
         {
            "Sid": "VisualEditor0",
            "Effect": "Allow",
            "Action": [
               "s3:PutObject"
            ],
            "Resource": "arn:aws:s3:::EXAMPLE-BUCKET/*"
        }
      ]
   }
   

   See Creating IAM policies in the AWS documentation.