amazon-s3 - s3 策略具有无效操作 - s3 :ListAllMyBuckets

Question

我正在尝试这些policy通过console.aws.amazon.com在我的水桶上:

    {      "Statement": [        {          "Effect": "Allow",          "Action": [            "s3:ListBucket",            "s3:GetBucketLocation",            "s3:ListBucketMultipartUploads"          ],          "Resource": "arn:aws:s3:::itnighq",          "Condition": {}        },        {          "Effect": "Allow",          "Action": [            "s3:AbortMultipartUpload",            "s3:DeleteObject",            "s3:DeleteObjectVersion",            "s3:GetObject",            "s3:GetObjectAcl",            "s3:GetObjectVersion",            "s3:GetObjectVersionAcl",            "s3:PutObject",            "s3:PutObjectAcl",            "s3:PutObjectAclVersion"          ],          "Resource": "arn:aws:s3:::itnighq/*",          "Condition": {}        },        {          "Effect": "Allow",          "Action": "s3:ListAllMyBuckets",          "Resource": "*",          "Condition": {}        }      ]    }

但我收到此错误消息:策略具有无效操作 - s3:ListAllMyBuckets它似乎不像 "Resource": "*" ，我也尝试过使用 **arn:aws:s3:::****，但它不起作用要么。

有人有任何线索吗？

Answer 1

正如 zdev 提到的，您需要为 IAM 执行此操作。前往IAM console导航到用户 > 权限 > 内联策略 > 创建 > 自定义，然后输入:

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": [
                "s3:ListAllMyBuckets"
            ],
            "Resource": [
                "arn:aws:s3:::*"
            ]
        }
    ]
}