Using the URN in policy statements

In policy statements, the URN is used in Principal and Resource elements.

Use this syntax to specify the S3 resource URN:

urn:sgws:s3:::bucket-name
urn:sgws:s3:::bucket-name/object_key

Use this syntax to specify the identity resource URN (users and groups):

urn:sgws:identity::account_id:root
urn:sgws:identity::account_id:user/user_name
urn:sgws:identity::account_id:group/group_name
urn:sgws:identity::account_id:federated-user/user_name
urn:sgws:identity::account_id:federated-group/group_name

Other considerations:

You can use the asterisk (*) as a wildcard to match zero or more characters inside the object key.
International characters, which can be specified in the object key, should be encoded using JSON UTF-8 or using JSON \u escape sequences. Percent-encoding is not supported.
RFC 2141 URN Syntax

The HTTP request body for the PUT Bucket policy operation must be encoded with charset=UTF-8.