diff --git a/IAM/Restrict even root access.png b/IAM/Restrict even root access.png
new file mode 100644
index 0000000..d80cf53
Binary files /dev/null and b/IAM/Restrict even root access.png differ
diff --git a/IAM/Restrict even root access.txt b/IAM/Restrict even root access.txt
new file mode 100644
index 0000000..42e1245
--- /dev/null
+++ b/IAM/Restrict even root access.txt	
@@ -0,0 +1,13 @@
+{
+
+   "Version":"2012-10-17",
+   "Statement":[
+      {
+         "Effect":"Deny",
+         "Principal": "*",
+         "Action": "s3:PutObject",
+         "Resource":"arn:aws:s3:::demo1-acesso-s3/*"
+      }
+   ]
+}
+