Forum Discussion

kikasudo's avatar
kikasudo
Icon for Bronze II rankBronze II
2 months ago

S3: Access Policies (Q5)

Hi I don't get passed this question when I put this for the access point: What am I missing here please, I always get an error on AWS saying that the access point can't be implemented. {    "Vers...
cloud security
jagira's avatar
jagira
Icon for Bronze II rankBronze II
2 months ago

Hi kikasudo 

Lets solve it. We are required to create access point in specified bucket. 

What is access point?

While bucket policies allow access to a specific user or group, this can be difficult to maintain with a large number of users, so AWS created access points.

Go to amazon s3 => buckets => metrolio-grant-some-access-74e985a2

you will find 2 objects in this bucket. click "access points" available in the menubar. Initially there is no access point in the specified bucket.

  • there is a button named "create access point", click it

  • enter name of the access point and select internet

  • as per question user metrolio-accessor is allowed to list all subjects ie s3:ListBucket

  • download only those within the data directory ie s3:GetObjectIn resource part there should be 2 lines:

  •   "Resource": [

    "arn:aws:iam::407044316022:accesspoint/metrolio-access-point",

             "arn:aws:iam::407044316022:accesspoint/metrolio-access-point/object/data/*"

           ]