Forum Discussion

kikasudo's avatar
kikasudo
Icon for Bronze II rankBronze II
9 months ago
Solved

S3: Access Policies (Q5)

Hi I don't get passed this question when I put this for the access point: What am I missing here please, I always get an error on AWS saying that the access point can't be implemented. {    "Vers...
  • jagira's avatar
    9 months ago

    Hi kikasudo 

    Lets solve it. We are required to create access point in specified bucket. 

    What is access point?

    While bucket policies allow access to a specific user or group, this can be difficult to maintain with a large number of users, so AWS created access points.

    Go to amazon s3 => buckets => metrolio-grant-some-access-74e985a2

    you will find 2 objects in this bucket. click "access points" available in the menubar. Initially there is no access point in the specified bucket.

    • there is a button named "create access point", click it
    • enter name of the access point and select internet

    • as per question user metrolio-accessor is allowed to list all subjects ie s3:ListBucket

    • download only those within the data directory ie s3:GetObjectIn resource part there should be 2 lines:

    •   "Resource": [

      "arn:aws:iam::407044316022:accesspoint/metrolio-access-point",

               "arn:aws:iam::407044316022:accesspoint/metrolio-access-point/object/data/*"

             ]