Difference between revisions of "AWS S3 policies"
Jump to navigation
Jump to search
↑ https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetObjectAcl.html
| (12 intermediate revisions by the same user not shown) | |||
| Line 1: | Line 1: | ||
| + | * https://docs.aws.amazon.com/AmazonS3/latest/userguide/access-policy-language-overview.html | ||
| + | * API reference: https://docs.aws.amazon.com/AmazonS3/latest/API/API_Operations_Amazon_Simple_Storage_Service.html | ||
| + | == [[s3:]] == | ||
| + | {{s3:}} | ||
| + | == Official example == | ||
| + | <pre> | ||
| + | { | ||
| + | "Version": "2012-10-17", | ||
| + | "Id": "ExamplePolicy01", | ||
| + | "Statement": [ | ||
| + | { | ||
| + | "Sid": "ExampleStatement01", | ||
| + | "Effect": "Allow", | ||
| + | "Principal": { | ||
| + | "AWS": "arn:aws:iam::123456789012:user/Dave" | ||
| + | }, | ||
| + | "Action": [ | ||
| + | "s3:GetObject", | ||
| + | "s3:GetBucketLocation", | ||
| + | "s3:ListBucket" | ||
| + | ], | ||
| + | "Resource": [ | ||
| + | "arn:aws:s3:::awsexamplebucket1/*", | ||
| + | "arn:aws:s3:::awsexamplebucket1" | ||
| + | ] | ||
| + | } | ||
| + | ] | ||
| + | } | ||
| + | </pre> | ||
| + | |||
| + | == Errors == | ||
| + | * <code>[[An error occurred (AccessDenied) when calling the DeleteObject operation: Access Denied]]</code> | ||
| + | |||
| + | == Activities == | ||
* [[S3 read-write access to a certain bucket]] | * [[S3 read-write access to a certain bucket]] | ||
* [[How do I troubleshoot the error "You don't have permissions to edit bucket policy" when I try to modify a bucket policy in Amazon S3?]] | * [[How do I troubleshoot the error "You don't have permissions to edit bucket policy" when I try to modify a bucket policy in Amazon S3?]] | ||
| + | == See also == | ||
| + | * {{S3 IAM}} | ||
| − | + | [[Category:AWS]] | |
Latest revision as of 09:34, 12 June 2024
- API reference: https://docs.aws.amazon.com/AmazonS3/latest/API/API_Operations_Amazon_Simple_Storage_Service.html
s3:[edit]
s3:, s3:ListBucket, s3:ListAllMyBuckets, s3:PutObject, s3:PutObjectAcl, s3:GetObject, s3:GetObjectAcl [1], s3:GetBucketPolicy, s3:PutBucketPolicy, s3:DeleteObject, s3:ReplicateObject, s3:ReplicateDelete, s3:ReplicateTags
Official example[edit]
{
"Version": "2012-10-17",
"Id": "ExamplePolicy01",
"Statement": [
{
"Sid": "ExampleStatement01",
"Effect": "Allow",
"Principal": {
"AWS": "arn:aws:iam::123456789012:user/Dave"
},
"Action": [
"s3:GetObject",
"s3:GetBucketLocation",
"s3:ListBucket"
],
"Resource": [
"arn:aws:s3:::awsexamplebucket1/*",
"arn:aws:s3:::awsexamplebucket1"
]
}
]
}
Errors[edit]
Activities[edit]
- S3 read-write access to a certain bucket
- How do I troubleshoot the error "You don't have permissions to edit bucket policy" when I try to modify a bucket policy in Amazon S3?
See also[edit]
Advertising:
