Amazon S3 Operations: Difference between revisions

From NovaOrdis Knowledge Base
Jump to navigation Jump to search
Line 19: Line 19:
             },
             },
             "Action": [
             "Action": [
                "s3:ListBucket",
                "s3:ListBucketMultipartUploads",
                 "s3:AbortMultipartUpload",
                 "s3:AbortMultipartUpload",
                "s3:ListBucketMultipartUploads",
                 "s3:GetBucketLocation",
                 "s3:GetBucketLocation",
                 "s3:ListBucket",
                 "s3:GetObject",
                 "s3:PutObject",
                 "s3:GetObjectVersion",
                 "s3:GetObject"
                 "s3:PutObject"
             ],
             ],
             "Resource": [
             "Resource": [

Revision as of 05:43, 13 February 2019

Internal

Grant an AWS Account Permissions on a Bucket

To grant an AWS account permissions on a bucket, edit the bucket policy and add a statement similar to the following to the list of existing statements:

{
    "Version": "2012-10-17",
    "Statement": [
        ...
        {
            "Sid": "PlaygroundCodeBuildAccessToPrivateMavenRepository",
            "Effect": "Allow",
            "Principal": {
                "AWS": "arn:aws:iam::673499572719:root"
            },
            "Action": [
                "s3:ListBucket",
                "s3:ListBucketMultipartUploads",
                "s3:AbortMultipartUpload",
                "s3:GetBucketLocation",
                "s3:GetObject",
                "s3:GetObjectVersion",
                "s3:PutObject"
            ],
            "Resource": [
                "arn:aws:s3:::example-private-maven/*",
                "arn:aws:s3:::example-private-maven"
            ]
        }
    ]
}

where "example-private-maven" is the name of the bucket hosting the repository in question, and arn:aws:iam::673499572719:root stands for the AWS account. More details here.