S3TransferManager-示例 | IAM getList 政策问题答案

【问题标题】：S3TransferManager-Sample | IAM getList policy issuesS3TransferManager-示例 | IAM getList 政策问题
【发布时间】：2015-02-25 05:47:05
【问题描述】：

我在 getList 调用中遇到此错误：

S3TransferManagerSample[1717:48308] listObjects failed: [Error Domain=com.amazonaws.AWSS3ErrorDomain Code=1“操作无法完成。（com.amazonaws.AWSS3ErrorDomain 错误 1.）”UserInfo=0x7fb71412d300 {HostId= qhjcOyYAPQjHhJIX5REMTN5A48ecxIkHCqt6fFwkQPBff+tKWnML9A4yQobq2C38, Message=Access Denied, Code=AccessDenied, RequestId=B6920900AB17C864}]

我创建了 2 个角色，一个是 auth，另一个是 un-auth。以下是这两个角色的内联策略：

RoleARN: Cognito_(projectName)Auth_Role
oneClick_Cognito_(projectName)Auth_Role_1424434616386: {
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "mobileanalytics:PutEvents",
        "cognito-sync:"
      ],
      "Resource": [
        ""
      ]
    }
  ]
}

policygen-Cognito_(projectName)Auth_Role-201502201739: {
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "Stmt1424435859000",
      "Effect": "Allow",
      "Action": [
        "s3:GetObject",
        "s3:ListBucket",
        "s3:PutObject"
      ],
      "Resource": [
        "arn:aws:s3:::(bucket name)/*"
      ]
    }
  ]
}

RoleARN: Cognito_(projectName)Unauth_Role
oneClick_Cognito_(projectName)Unauth_Role_1424434555837: {
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "mobileanalytics:PutEvents",
        "cognito-sync:"
      ],
      "Resource": [
        ""
      ]
    }
  ]
}

policygen-Cognito_(projectName)Unauth_Role-201502201743: {
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "Stmt1424436103000",
      "Effect": "Allow",
      "Action": [
        "s3:GetObject",
        "s3:ListBucket",
        "s3:PutObject"
      ],
      "Resource": [
        "arn:aws:s3:::(bucket name)/*"
      ]
    }
  ]
}

有人可以指导我吗？

【问题讨论】：

标签： ios objective-c amazon-web-services amazon-s3 amazon-iam

【解决方案1】：

ListBucket 需要为桶授予权限，而不是桶中的密钥。您应该查看this blog 了解更多详情。

【讨论】：