亚马逊网络服务S3访问被拒绝

时间:2017-03-09 19:53:26

标签: amazon-web-services amazon-s3

我无法从我的应用访问我的aws S3服务器存储桶。我在存储桶日志文件中收到请求,但访问被拒绝。 我有内联策略和托管策略允许完全访问服务器,以及设置服务器权限以允许每个人,但它仍然说访问被拒绝。 也创建了右池的标识。 在应用程序结束时,我收到一条消息,表明找不到存储桶。 服务器区域是伦敦。

我已经阅读了很多关于这个问题的其他问题,但没有一个能解决我的问题。

谢谢

内联未经身份验证的IAM政策

{
"Version": "2012-10-17",
"Statement": [
    {
        "Sid": "Stmt1488834891000",
        "Effect": "Allow",
        "Action": [
            "s3:*"
        ],
        "Resource": [
            "arn:aws:s3:::ascentserver/*"
        ]
    }
]

}

由于某些原因,这在策略模拟器上不起作用,我尝试为存储桶和服务添加资源,但没有帮助。

托管策略是默认的S3完全访问权限,并模拟为正常工作。

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": "s3:*",
      "Resource": "*"
    }
  ]
}

寻址服务器的代码段:

public void setFileToUpload(){

       TransferObserver transferObserver = transferUtility.upload(
                "http://ascentserver.s3.eu-west-2.amazonaws.com",     /* The bucket to upload to */
                "TEST.png",    /* The key for the uploaded object */
                fileToUpload       /* The file where the data to upload exists */
        );

       transferObserverListener(transferObserver);
    }

2 个答案:

答案 0 :(得分:0)

所以我们使用的代码如下: 请注意,这些只是片段,而不是整个代码

[主要]

import com.amazonaws.auth.CognitoCachingCredentialsProvider;
import com.amazonaws.mobileconnectors.s3.transferutility.TransferListener;
import com.amazonaws.mobileconnectors.s3.transferutility.TransferObserver;
import com.amazonaws.mobileconnectors.s3.transferutility.TransferState;
import com.amazonaws.mobileconnectors.s3.transferutility.TransferUtility;
import com.amazonaws.regions.Region;
import com.amazonaws.regions.Regions;
import com.amazonaws.services.s3.AmazonS3;
import com.amazonaws.services.s3.AmazonS3Client;

import java.io.File;

public class MainActivity extends AppCompatActivity
    implements NavigationView.OnNavigationItemSelectedListener {

File fileToUpload = new     File("/storage/emulated/0/Pictures/Screenshots/TEST.png");
File fileToDownload = new File("/storage/emulated/0/Download/TEST");
AmazonS3 s3;
TransferUtility transferUtility;

@Override
protected void onCreate(Bundle savedInstanceState) {
    super.onCreate(savedInstanceState);
    setContentView(R.layout.activity_main);
    Toolbar toolbar = (Toolbar) findViewById(R.id.toolbar);
    setSupportActionBar(toolbar);

    // callback method to call credentialsProvider method
    credentialsProvider();

    // callback method to call the setTransferUtility method
    setTransferUtility();
}

public void credentialsProvider(){

    // Initialize the Amazon Cognito credentials provider
    CognitoCachingCredentialsProvider credentialsProvider = new CognitoCachingCredentialsProvider(
            getApplicationContext(),
            "eu-west-1:0e33dea3-6075-4ea5-a268-b0c1364f5107", // Identity Pool ID
            Regions.EU_WEST_1 // Region
    );

    setAmazonS3Client(credentialsProvider);
}

public void setAmazonS3Client(CognitoCachingCredentialsProvider credentialsProvider){

    // Create an S3 client
    s3 = new AmazonS3Client(credentialsProvider);

    // Set the region of your S3 bucket
    s3.setRegion(Region.getRegion(Regions.EU_WEST_1));

}

public void setTransferUtility(){

    transferUtility = new TransferUtility(s3, getApplicationContext());
}

public void setFileToUpload(){

    TransferObserver transferObserver = transferUtility.upload(
            "http://ascentserver.s3.eu-west-2.amazonaws.com",     /* The bucket to upload to */
            "TEST.png",    /* The key for the uploaded object */
            fileToUpload       /* The file where the data to upload exists */
    );

    transferObserverListener(transferObserver);
}

public void setFileToDownload(){

    TransferObserver transferObserver = transferUtility.download(
            "http://ascentserver.s3.eu-west-2.amazonaws.com",     /* The bucket to download from */
            "TEST.png",    /* The key for the object to download */
            fileToDownload        /* The file to download the object to */
    );

    transferObserverListener(transferObserver);

}

public void transferObserverListener(TransferObserver transferObserver){

    // listener that provides status of download
    transferObserver.setTransferListener(new TransferListener(){

        @Override
        public void onStateChanged(int id, TransferState state) {
            Log.e("statechange", state+"");
        }

        @Override
        public void onProgressChanged(int id, long bytesCurrent, long bytesTotal) {
            int percentage = (int) (bytesCurrent/bytesTotal * 100);
            Log.e("percentage",percentage +"");
        }

        @Override
        public void onError(int id, Exception ex) {
            Log.e("error","error");
        }

    });
}
}

[依赖]

compile 'com.amazonaws:aws-android-sdk-core:2.2.13'
compile 'com.amazonaws:aws-android-sdk-cognito:2.2.13'
compile 'com.amazonaws:aws-android-sdk-s3:2.2.13'
compile 'com.amazonaws:aws-android-sdk-ddb:2.2.13'

[清单]     

<uses-permission android:name="android.permission.INTERNET"/>
<uses-permission android:name="android.permission.WRITE_EXTERNAL_STORAGE" />
<uses-permission android:name="android.permission.READ_EXTERNAL_STORAGE" />
<uses-permission android:name="android.permission.ACCESS_NETWORK_STATE"/>

<service
        android:name="com.amazonaws.mobileconnectors.s3.transferutility.TransferService"
        android:enabled="true" />

答案 1 :(得分:0)

您需要为function myonEdit(){ var ss = SpreadsheetApp.getActiveSheet(); var e = ss.getActiveCell(); var heading = ss.getRange(1, e.getColumn()).getValues(); var rvalue = e.getValue(); var email_finished = "abc@xyz.com"; var ui = SpreadsheetApp.getUi() ui.alert("Are you sure?", ui.ButtonSet.OK) if (heading == "FINISHED" && rvalue == "√") { MailApp.sendEmail(email_finished, "SOP Review", "SOP has been finished"); } } 方法提供ascentserver而不是http://ascentserver.s3.eu-west-2.amazonaws.com的存储分区名称,并确保transferUtility.upload()使用正确的区域而不是默认区域将端点设置为AmazonS3Client

例如:

s3.setEndpoint("s3.eu-west-2.amazonaws.com")