Question

我正在通过aws cli控制台进行分段上传，但是收到此错误;

A client error (AccessDenied) occurred when calling the CreateMultipartUpload operation: Access Denied

以下是我的政策，我在那里遗漏了什么？

感谢。

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": [
                "s3:ListAllMyBuckets"
            ],
            "Resource": "arn:aws:s3:::*"
        },
        {
            "Effect": "Allow",
            "Action": [
                "s3:ListBucket",
                "s3:GetBucketLocation"
            ],
            "Resource": "arn:aws:s3:::mybucket"
        },
        {
            "Effect": "Allow",
            "Action": [
                "s3:PutObject",
                "s3:GetObject",
                "s3:DeleteObject",
                "s3:CreateMultipartUpload",
                "s3:AbortMultipartUpload",
                "s3:ListMultipartUploadParts",
                "s3:ListBucketMultipartUploads"
            ],
            "Resource": "arn:aws:s3:::mybucket/*"
        }
    ]
}

Answer 1

＆＃34; s3：PutObject＆＃34;处理CreateMultipartUpload操作，所以我猜没有像＆＃34; s3：CreateMultipartUpload＆＃34;。

你必须在你的s3桶中改变ARN就好了添加＆＃34;资源＆＃34;：＆＃34; arn：aws：s3 ::: mybucket＆＃34;

最终政策：

StringEscapeUtils.unescapeHtml4(String htmlString)

Answer 2

如果它是跨帐户访问权限，请检查它与ACL标头无关，如下所述：https://stackoverflow.com/a/34055538/1736679（此问题帖子中的更多信息：https://github.com/aws/aws-cli/issues/1674）

同时仔细检查您正在运行的环境/用户，以查看/ etc / environment中是否存在覆盖密钥（AWS_ACCESS_KEY等）或〜/ .aws / credentials

CreateMultipartUpload操作 - 需要AWS策略项吗？

2 个答案: