amazon web services - Root user is denied downloading from s3 bucket -


using s3cmd after configuring root privileges (access key , secret key), whenever try download bucket using sync or get , receive strange error of permission root account:

warning: remote file  s3error: 403 (forbidden): 

the owner user have made using iam console, correct expect root user should full , unrestricted access? using aws-cli unknown error

a client error (unknown) occurred when calling getobject operation: unknown 

also thought had add bucket policy allow root access (as strange sounds), first step added annonymous access policy

{     "version": "2012-10-17",     "statement": [         {             "effect": "allow",             "principal": "*",             "action": [                 "s3:getobject"             ],             "resource": [                 "arn:aws:s3:::mybucket/*"             ]         }     ] } 

but still errors same above. owner of bucket root user (the 1 trying access same owner). understanding wrong here? how can restore root user's access own bucket made 1 of own iam users?

for of s3 read permissions work, need not allow objects allow listbucket on bucket(s), listallmybuckets , getbucketlocation, consolidated version:

{ "version": "2012-10-17", "statement": [     {         "effect": "allow",         "action": "s3:listallmybuckets",         "resource": "arn:aws:s3:::*"     },     {         "effect": "allow",         "principal": "*",         "action": [             "s3:get*",             "s3:list*"         ],         "resource": [             "arn:aws:s3:::mybucket/*",             "arn:aws:s3:::mybucket"         ]     } ] } 

see more examples @ aws iam documentation


Comments

Popular posts from this blog

asp.net mvc - SSO between MVCForum and Umbraco7 -

Python Tkinter keyboard using bind -

ubuntu - Selenium Node Not Connecting to Hub, Not Opening Port -