s3 Bucket Policies Access Denied

Question

I am trying to upload an object on s3 from aws-sdk-js, but cannot figure out policies for my case. I want to allow only one user to have upload access and a public read access.

Here are my s3 bucket policies

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "PublicReadForGetBucketObjects",
            "Effect": "Allow",
            "Principal": {
                "AWS": "*"
            },
            "Action": "s3:GetObject",
            "Resource": "arn:aws:s3:::some-bucket/*"
        },
        {
            "Sid": "",
            "Effect": "Allow",
            "Principal": {
                "AWS": "arn:aws:iam::1111111111111:user/some-bucket-user"
            },
            "Action": "s3:*",
            "Resource": "arn:aws:s3:::some-bucket/*"
        }
    ]
}

And My IAM policies are :

{
  "Version":"2012-10-17",
  "Statement":[
    {
      "Sid":"AddPerm",
      "Effect":"Allow",
      "Action":"s3:*",
      "Resource":["arn:aws:s3:::some-bucket/*"]
    }
  ]
}

Can someone please point out what I am doing wrong here?

HerSta · Answer 1 · 2017-08-04T12:15:22.423

1

To do this you don't have to deal with bucket policies at all. Bucket policies are used for allowing services to access your S3 database - not users.

To allow a user to access your S3 database add it under Permissions/Access Control List (this is next to "bucket policy") with the wanted permissions.

If it absolutely must be done via bucket policy this link covers it all: http://docs.aws.amazon.com/AmazonS3/latest/dev/s3-bucket-user-policy-specifying-principal-intro.html

edited Aug 04 '17 at 12:15

answered Aug 03 '17 at 08:24

HerSta

107
9

I am using `private` ACL, and in JS what I do I simply add the key/secret of the created user in `aws.config.update({})` . This whole thing works if I do `Principle: {AWS: *}` because it gives permissions to all users. – Farhan Salam Aug 03 '17 at 08:56
oh, in that case it this link should cover it all: http://docs.aws.amazon.com/AmazonS3/latest/dev/s3-bucket-user-policy-specifying-principal-intro.html – HerSta Aug 03 '17 at 10:12

score 1 · Accepted Answer · answered Aug 04 '17 at 06:56

1

My bad, I was not initialising the AWS.S3 correctly and it was using the users/roles of the ec2 instance and not the one I was assigning.

answered Aug 04 '17 at 06:56

Farhan Salam

1,257
11
16

s3 Bucket Policies Access Denied

2 Answers2