amazon-s3 - 执行 S3 标准存储类的策略

Question

有没有办法定义 S3 存储桶策略来强制执行标准存储类？我想阻止用户创建具有减少的冗余存储类的对象。

Answer 1

您现在可以使用 S3 存储桶策略中的条件将 S3 对象的创建(使用 PutObject)限制为特定的存储类。

AWS 文档的当前版本有一个示例 - Restrict object uploads to objects with a specific storage class .

Suppose Account A owns a bucket and the account administrator wants to restrict Dave, a user in Account A, to be able to only upload objects to the bucket that will be stored with the STANDARD_IA storage class. The Account A administrator can accomplish this by using the s3:x-amz-storage-class condition key as shown in the following example bucket policy.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "statement1",
      "Effect": "Allow",
      "Principal": {
        "AWS": "arn:aws:iam::AccountA-ID:user/Dave"
      },
      "Action": "s3:PutObject",
      "Resource": [
        "arn:aws:s3:::examplebucket/*"
      ],
      "Condition": {
        "StringEquals": {
          "s3:x-amz-storage-class": [
            "STANDARD_IA"
          ]
        }
      }
    }
  ]
}

您对 Principal 的值(value)和 Resource将特定于您的用户和 S3 存储桶。 Condition约束需要更改为 STANDARD .