2017-04-20 60 views
0

我有這樣的政策,爲什麼不能當我嘗試上傳的對象,我得到寫入S3存儲IAM用戶無法寫入到S3

{ 
"Version": "2012-10-17", 
"Statement": [ 
{ 
    "Effect": "Allow", 
    "Action": ["s3:ListBucket"], 
    "Resource": [ 
    "arn:aws:s3:::cf-templates-erb4urdcaiht-us-east-1", 
    "arn:aws:s3:::elasticbeanstalk-us-east-1-008151213029", 
    "arn:aws:s3:::test-bucket-for-iam" 
    ] 
}, 
{ 
    "Effect": "Allow", 
    "Action": [ 
    "s3:PutObject*", 
    "s3:GetObject*", 
    "s3:GetObjectAcl", 
    "s3:PutObjectAcl", 
    "s3:DeleteObject" 
    ], 
    "Resource": [ 
    "arn:aws:s3:::cf-templates-erb4urdcaiht-us-east-1", 
    "arn:aws:s3:::elasticbeanstalk-us-east-1-008151213029", 
    "arn:aws:s3:::test-bucket-for-iam" 
    ] 
    } 
] 
} 

,我已經給putobject爲什麼亞姆我越來越這個錯誤

An error occurred (AccessDenied) when calling the PutObject operation: Access Denied 
+2

嘗試刪除PutObject和GetObject後面的星號。相反,在同一個塊的資源末尾添加一個斜線和星號,例如, G。 ''arn:aws:s3 ::: test-bucket-for-iam/*' – salient

+0

謝謝,我應該意識到這一點,我的不好。 – chandra

回答

0

更改

"arn:aws:s3:::cf-templates-erb4urdcaiht-us-east-1" 

這個

"arn:aws:s3:::cf-templates-erb4urdcaiht-us-east-1/*" 

在我的情況下工作。