[Cyberduck-trac] [Cyberduck] #6952: S3 restricted folder access denied permissions

Cyberduck trac at trac.cyberduck.ch
Sun Nov 25 14:50:50 CET 2012


#6952: S3 restricted folder access denied permissions
---------------------------+---------------------------
 Reporter:  detail         |         Owner:  dkocher
     Type:  defect         |        Status:  closed
 Priority:  normal         |     Milestone:
Component:  s3             |       Version:  4.2.1
 Severity:  normal         |    Resolution:  thirdparty
 Keywords:                 |  Architecture:  Intel
 Platform:  Mac OS X 10.7  |
---------------------------+---------------------------
Changes (by dkocher):

 * status:  new => closed
 * resolution:   => thirdparty


Comment:

 Not exactly sure without testing why the above policy doesn't work but you
 could simplify it by narrowing down the `Resource` instead of a prefix
 condition.


 {{{
 {
    "Statement":[
    {
       "Action": [
         "s3:ListAllMyBuckets",
         "s3:GetBucketLocation",
         "s3:ListBucket"
       ],
       "Effect": "Allow",
       "Resource": [ "arn:aws:s3:::*" ]
     },
     {
       "Effect":"Allow",
       "Action":["s3:PutObject","s3:GetObject","s3:GetObjectVersion",
       "s3:DeleteObject","s3:DeleteObjectVersion"],
       "Resource":"arn:aws:s3:::bucket/site/wp-content/themes/*"
     }
    ]
 }

 }}}

-- 
Ticket URL: <http://trac.cyberduck.ch/ticket/6952#comment:2>
Cyberduck <http://cyberduck.ch>
Open source FTP, SFTP, WebDAV, Cloud Files, Google Docs & Amazon S3 Browser for Mac & Windows.


More information about the Cyberduck-trac mailing list