amazon-s3 - 同步所需的 AWS 权限

Question

我有一台需要与 S3 同步文件夹的 Windows 机器。

我试试

"C:\Program Files\amazon\AWSCLI\aws.exe" s3 sync components 
s3://test/MyTest/ --acl public-read --
cache-control "public, must-revalidate, proxy-revalidate, max-age=1800"

出现错误“调用 PutObject 操作时发生客户端错误 (AccessDenied):拒绝访问”

s3 rm 和 s3 cp 对于同一目录工作正常。

我有以下权限:

"Sid": "VisualEditor4",
            "Effect": "Allow",
            "Action": [
                "s3:PutObject",
                "s3:PutObjectAcl"
            ],
            "Resource":  

Answer 1

您需要所有这些操作:

s3:DeleteObject

s3:GetBucketLocation

s3:GetObject

s3:ListBucket

s3:PutObject

不仅 PutObject ，为了获得工作 S3 同步， 使用此政策 :

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Resource": [
                "arn:aws:s3:::YOUR_BUCKET_NAME",
                "arn:aws:s3:::YOUR_BUCKET_NAME/*"
            ],
            "Sid": "Stmt1464826210000",
            "Effect": "Allow",
            "Action": [
                "s3:DeleteObject",
                "s3:GetBucketLocation",
                "s3:GetObject",
                "s3:ListBucket",
                "s3:PutObject"
            ]
        }
    ]
}