s3 Policy has invalid action - s3:ListAllMyBuckets

Question

I'm trying these policy through console.aws.amazon.com on my buckets:


    {
      "Statement": [
        {
          "Effect": "Allow",
          "Action": [
            "s3:ListBucket",
            "s3:GetBucketLocation",
            "s3:ListBucketMultipartUploads"
          ],
          "Resource": "arn:aws:s3:::itnighq",
          "Condition": {}
        },
        {
          "Effect": "Allow",
          "Action": [
            "s3:AbortMultipartUpload",
            "s3:DeleteObject",
            "s3:DeleteObjectVersion",
            "s3:GetObject",
            "s3:GetObjectAcl",
            "s3:GetObjectVersion",
            "s3:GetObjectVersionAcl",
            "s3:PutObject",
            "s3:PutObjectAcl",
            "s3:PutObjectAclVersion"
          ],
          "Resource": "arn:aws:s3:::itnighq/*",
          "Condition": {}
        },
        {
          "Effect": "Allow",
          "Action": "s3:ListAllMyBuckets",
          "Resource": "*",
          "Condition": {}
        }
      ]
    }

But I'm getting this error message: Policy has invalid action - s3:ListAllMyBuckets It doesn't seem to like "Resource": "*" , I've also tried to use **arn:aws:s3:::****, but it doesn't work either.

Anyone has any clue?

z0r · Answer 1 · 2016-04-27T02:22:14.760

19

As zdev mentioned, you need to do this for the IAM. Go to the IAM console and navigate to Users > Permissions > Inline policies > Create > Custom, and enter this:

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": [
                "s3:ListAllMyBuckets"
            ],
            "Resource": [
                "arn:aws:s3:::*"
            ]
        }
    ]
}

edited Apr 27 '16 at 02:22

answered Sep 25 '15 at 10:54

z0r

8,185
4
64
83

This policy contains the following error: The following Statement Ids are invalid: "Allow user to list all S3 buckets" – zPrima Apr 25 '16 at 23:39
@zPrima thanks, looks like [the `Sid` field is optional](http://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_grammar.html#policies-grammar-bnf) anyway. I've removed it. – z0r Apr 27 '16 at 02:22

score 15 · Accepted Answer · answered Dec 01 '12 at 11:10

15

I figured out myself. It needs to be done in the IAM, not in S3 itself...

answered Dec 01 '12 at 11:10

zdev

425
1
4
9

19

Could you please describe the steps for how to apply this policy in IAM? – dnlbrky Oct 17 '14 at 13:59

score 2 · Answer 3 · answered Apr 10 '15 at 20:13

2

@dnlbrky You need to do this by setting the policy on for the IAM user/group/role and set it by either using the AWS console for the IAM user/group or by calling put_[role/user/group]_policy boto API call.

answered Apr 10 '15 at 20:13

Vahid Kowsari

145
1
7

VipinKundal · Answer 4 · 2020-01-22T07:31:22.243

1

Anyone getting same issue:

S3 bucket Policy Actions are different from IAM policy actions. Can reference to s3 actions from https://docs.aws.amazon.com/AmazonS3/latest/dev/using-with-s3-actions.html.

Or try with the following actions

"Action": [
        "s3:DeleteObject",
        "s3:GetObject",
        "s3:PutObject"
      ],

edited Jan 22 '20 at 07:31

answered Jan 22 '20 at 07:26

VipinKundal

442
6
14

s3 Policy has invalid action - s3:ListAllMyBuckets

4 Answers4

Linked