需要用户访问某个文件夹而不是AWS s3中的其他文件夹的用户

时间:2018-10-25 11:18:31

标签: amazon-s3 amazon-iam

嗨,我尝试了Internet上的每个Jason,但没有得到合适的结果,我希望他的用户访问anil文件夹,并且只有具有读写权限的aws存储桶中的anil文件夹

这是JSON文件

{
"Version": "2012-10-17",
"Statement": [
    {
        "Sid": "AllowUserToSeeBucketListInTheConsole",
        "Action": [
            "s3:ListAllMyBuckets",
            "s3:GetBucketLocation"
        ],
        "Effect": "Allow",
        "Resource": [
            "arn:aws:s3:::*"
        ]
    },
    {
        "Sid": "AllowRootAndHomeListingOfCompanyBucket",
        "Action": [
            "s3:ListBucket"
        ],
        "Effect": "Allow",
        "Resource": [
            "arn:aws:s3:::aniltest123"
        ],
        "Condition": {
            "StringEquals": {
                "s3:prefix": [
                    "",
                    "home/",
                    "home/anil"
                ],
                "s3:delimiter": [
                    "/"
                ]
            }
        }
    },
    {
        "Sid": "AllowListingOfUserFolder",
        "Action": [
            "s3:ListBucket"
        ],
        "Effect": "Allow",
        "Resource": [
            "arn:aws:s3:::aniltest123"
        ],
        "Condition": {
            "StringLike": {
                "s3:prefix": [
                    "home/anil/*"
                ]
            }
        }
    },
    {
        "Sid": "AllowAllS3ActionsInUserFolder",
        "Effect": "Allow",
        "Action": [
            "s3:*"
        ],
        "Resource": [
            "arn:aws:s3:::aniltest123/home/anil/*"
        ]
    }
]

}

请帮助我解决这个问题,因为这是我第一次这样做

0 个答案:

没有答案