AWS IAM不允许PutObject

Question

以下是我所做的：

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": [
                "s3:*"
            ],
            "Resource": "arn:aws:s3:::bucket-name"
        }
    ] }

aws s3 sync ./dist s3://bucket-name/ --delete

aws s3api list-objects --bucket bucket-name

提前致谢

Answer 1

好吧，我想出来了。该政策需要：

[
  {
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": [
                "s3:*"
            ],
            "Resource": [
                "arn:aws:s3:::bucket-name",
                "arn:aws:s3:::bucket-name/*"
            ]
        }
    ] 
  }
]

请注意资源方面的差异。基本上，桶本身被认为是不同于其内部对象的资源。