2014-10-09 118 views
1

我在wordpress中遇到此错误:Error retrieving a list of your S3 buckets from AWS:Access Denied。我为IAM用户编写了策略。我不知道我在做什么错。请帮帮我。从AWS中检索您的S3存储桶列表时出错:拒绝访问

我的IAM政策是在这里:

{ 
    "Version": "2012-10-17", 
    "Statement": [ 
    { 
     "Sid": "Stmtxxxxxxxxxxx", 
     "Effect": "Allow", 
     "Action": [ 
     "s3:GetBucketLocation", 
     "s3:ListBucket", 
     "s3:ListBucketMultipartUploads" 
     ], 
     "Resource": [ 
     "arn:aws:s3:::bucketname/*" 
     ] 
    } 
    ] 
} 

回答

3

首先,为了列出所有的桶,你需要创建一个可以让你的IAM进行声明:在整个“S3 ListAllMyBuckets” S3帐户

{ "Effect": "Allow", "Action": "s3:ListAllMyBuckets", "Resource": "*", "Condition": {} }

此外,它好像你有水桶上市,因为您尝试的动作,让烦恼:

"Action": [ "s3:GetBucketLocation", "s3:ListBucket", "s3:ListBucketMultipartUploads" ],

必须应用于整个斗:

"Resource": "arn:aws:s3:::bucketname",

,而你正在试图让这一行动桶的内容:

"Resource": "arn:aws:s3:::bucketname/*",

无论如何,请尝试以下政策:

{ "Version": "2012-10-17", "Statement": [ { "Sid": "Stmtxxxxxxxxxxx", "Effect": "Allow", "Action": [ "s3:GetBucketLocation", "s3:ListBucket", "s3:ListBucketMultipartUploads" ], "Resource": "arn:aws:s3:::bucketname", "Condition": {} }, { "Effect": "Allow", "Action": "s3:ListAllMyBuckets", "Resource": "*", "Condition": {} } ] }

我在我的网站上测试过它,它工作。

如果您有任何其他问题,请随时询问。

谢谢, 弗拉德

+0

thnak你。其实我忘记给用户一个管理访问权限。现在一切正常。 – Kamal 2014-10-09 12:00:11