I'm new to AWS and was looking for a bucket policy to enable my ec2 servers access to the S3 buckets on the same account. I tried using this policy which enables the account: { "Sid": "AddCannedAcl", "Effect": "Allow", "Principal": { "AWS": "arn:aws:iam::account-number:root" }, "Action": "s3:", "Resource": "arn:aws:s3:::my-bucket/" } ] } But I got access denied on the ec2.
I've found this: http://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements.html#Principal "Principal": { "Service": [ "ec2.amazonaws.com", "datapipeline.amazonaws.com" ] } Which supposed to enable specifically the ec2. But when editing the policy I get "We encountered an internal error. Please try again." Any help is appreciated.