0

Despite my best efforts, even using the official AWS Policy Generator and AWS Policy Simulator, I just cannot get the correct policy or policies to allow a single User access to only one Bucket.

This is what I have generated but when I test, it fails.

{
    "Statement": [
        {
            "Action": [
                "s3:ListAllMyBuckets",
                "s3:GetBucketLocation",
                "s3:ListBucket"
            ],
            "Effect": "Allow",
            "Resource": "arn:aws:s3:::*"
        },
        {
            "Action": "s3:*",
            "Effect": "Allow",
            "Resource": "arn:aws:s3:::bucket.name/*"
        }
    ]
}

I am trying to apply this policy to the User in IAM.

What am I doing wrong?

  • Do you want a single bucket to be accessible to only one user (ie restrict the bucket), or do you want one user to have access to only a single bucket (ie restrict the user)? – Tim Jan 31 '17 at 18:10
  • I think, you have to add version, like in stackoverflow.com/questions/19496919/… Regards. – Kefir Feb 2 '17 at 9:14
1

That policy works for me. It is likely that you either have a typo in the bucket name, or the policy isn't attached to the user you're using, you're accessing the bucket using a different user than you think you are, etc.

| improve this answer | |

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.