amazon-web-services - 如何为特定角色创建 IAM 策略并授予对 s3bucket 获取和放置操作的访问权限

Question

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": "s3:*",
            "Resource": "*"
        }
    ]
}

这是我的 amazons3fullaccess 政策，但现在我只想授予 get put 和 delete 访问权限而不是完全访问权限

标签： amazon-web-servicesamazon-s3amazon-ec2amazon-iamaws-policies

Answer 1

您可以使用通配符执行以下操作：

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": ["s3:put*", "s3:delete*", "s3:get*"],
            "Resource": "*"
        }
    ]
}

或者，如果您想更具体（良好做法！）：

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": ["s3:putObject", "s3:deleteObject", "s3:getObject"],
            "Resource": "*"
        }
    ]
}