Step 1: Create a bucket. ...
Step 2: Create IAM users and a group. ...
Step 3: Verify that IAM users have no permissions. ...
Step 4: Grant group-level permissions. ...
Step 5: Grant IAM user Alice specific permissions.
https://docs.aws.amazon.com/AmazonS3/latest/userguide/walkthrough1.html