AWS s3 存储桶策略无效的组委托人 [英] AWS s3 bucket policy invalid group principal

问题描述

这是如何使用 AWS S3 存储桶策略强制执行文件类型上传

应用存储桶策略时:

{
  "Version":"2008-10-17",
  "Statement": [
    {
      "Sid":"AddPerm",
      "Effect":"Allow",
      "Principal": { "AWS": "arn:aws:iam::111122223333:group/admins" },
      "Action": "s3:PutObject",
      "Resource": "arn:aws:s3:::bucket/*.txt"
    }
  ]
}

admins"组肯定存在，但我收到错误消息:"策略中的无效主体 - "AWS" : "arn:aws:iam::111122223333:group/admins""

The group "admins" definitely exists, but I get the error: "Invalid principal in policy - "AWS" : "arn:aws:iam::111122223333:group/admins""

为什么不被认可?

推荐答案

目前无法在 Principal 中使用组.请参阅 https://forums.aws.amazon.com/message.jspa?messageID=356160

It's not possible to use groups in Principal at the moment. See https://forums.aws.amazon.com/message.jspa?messageID=356160

这篇关于AWS s3 存储桶策略无效的组委托人的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！