AWS / Wasabi S3 策略允许单个用户完全访问单个 bucket

在你的 bucket 配置中使用此 S3 策略以允许单个用户（由其 ARN 标识）完全访问单个 bucket：

bucket_policy.json

{
  "Id": "MyBucketPolicy",
  "Statement": [
    {
      "Sid": "AllAccess",
      "Action": "s3:*",
      "Effect": "Allow",
      "Resource": [
         "arn:aws:s3:::my-bucket-name",
         "arn:aws:s3:::my-bucket-name/*"
      ],
      "Principal": {"AWS":["arn:aws:iam::100000012345:user/MyUser"]}
    }
  ]
}

{
  "Id": "MyBucketPolicy",
  "Statement": [
    {
      "Sid": "AllAccess",
      "Action": "s3:*",
      "Effect": "Allow",
      "Resource": [
         "arn:aws:s3:::my-bucket-name",
         "arn:aws:s3:::my-bucket-name/*"
      ],
      "Principal": {"AWS":["arn:aws:iam::100000012345:user/MyUser"]}
    }
  ]
}

将 arn:aws:s3:::my-bucket-name 的两个实例替换为你的 bucket ARN，并将 arn:aws:iam::100000012345:user/MyUser 替换为你的用户 ARN。你也可以向 "Principal": {"AWS": ... } 添加多个用户 ARN。

Check out similar posts by category: Data Science

If this post helped you, please consider buying me a coffee or donating via PayPal to support research & publishing of new posts on TechOverflow

Buy me a coffee