I'm reading the doc here but I can't see how to add a condition to restrict uploads to some whitelist of extension / mime types.
ie: I'd like to only allow people to upload files with extensions "xls", "xlsx", "ppt", "pptx", "doc", "docx", "txt", "csv"
Is this possible?
PS: I'm using jquery-file-upload and already check client side before my POST to s3 but some browsers don't support the File api so I need a double check.
You're likely to validate by its mime type
(which might be useless, since if a mimetype isn't registered, it will pick the default one for a binary unknown type, from the browser perspective).
In the docs, its referred as such:
["starts-with", "$Content-Type", "image/"],
I'm not sure if sets are allowed. At the very least, you could combine several policies, one for each allowed mime type.
As for Extension, I guess you have no options, though.
Edit: I've wrote a post a while ago outlining how the whole process works and how to use it (Disclaimer: I write for Newvem)