amazon-web-services - AWS s3 存储桶策略无效组委托(delegate)人

Question

这是 How can i enforce file type uploads with an AWS S3 bucket policy 的后续内容

应用存储桶策略时:

{
  "Version":"2008-10-17",
  "Statement": [
    {
      "Sid":"AddPerm",
      "Effect":"Allow",
      "Principal": { "AWS": "arn:aws:iam::111122223333:group/admins" },
      "Action": "s3:PutObject",
      "Resource": "arn:aws:s3:::bucket/*.txt"
    }
  ]
}

组“管理员”肯定存在，但我收到错误:
“策略中的无效委托(delegate)人 - “AWS”:“arn:aws:iam::111122223333:group/admins”

为什么不被认可？

Answer 1

不能在 Principal 中使用组在这一刻。见 https://forums.aws.amazon.com/message.jspa?messageID=356160