amazon-web-services - Amazon S3 VPC 终端节点访问问题

Question

我们需要公开 S3 存储桶吗？如果我们想使用 VPC 端点来访问存储桶。存储桶是私有的，我的存储桶策略如下。

{
"Version": "2012-10-17",
"Id": "Policy1415115909152",
"Statement": [
    {
        "Sid": "Access-to-specific-VPCE-only",
        "Effect": "Allow",
        "Principal": "*",
        "Action": "s3:GetObject",
        "Resource": [
            "arn:aws:s3:::bucket-name",
            "arn:aws:s3:::bucket-name/*"
        ],
        "Condition": {
            "StringEquals": {
                "aws:sourceVpce": "vpce-XXXXXXXXX"
            }
        }
    }
]

}

访问时出现以下错误

403 Forbidden
Code: AccessDenied
Message: Access Denied
RequestId: 3B5263AFE5F08F7D
HostId: M2+BaRG/GqiasUSkPo9rC46aC84pmZHNcbSnA2UcWcHxWntFRWjcli7VdN0wLpnsSZgK659008Y=

我已经在存储桶上启用了静态网站托管，Idea 是在 VPC 中私下访问它。

标签： amazon-web-servicesamazon-s3amazon-vpc