Internet Sellout

Demand Unearned Rewards

Not in Azure Toto - AWS S3 Policy

I love Azure, but sometimes we gotta do what we gotta do...

I was having trouble listing the contents of an S3 bucket in AWS, this policy allowed upload, but not list:

{
    "Statement": [
        {
            "Sid": "",
            "Effect": "Allow",
            "Action": [
                "s3:*"
            ],
            "Resource": [
                "arn:aws:s3:::bucketname/*"
            ]
        }
    ]
}

This allowed everything (removed the trailing slash after the bucket name):

{
    "Statement": [
        {
            "Sid": "",
            "Effect": "Allow",
            "Action": [
                "s3:*"
            ],
            "Resource": [
                "arn:aws:s3:::bucketname*"
            ]
        }
    ]
}

 

Comments are closed