S3: Access Policies (Q5)

Hi kikasudo 

Lets solve it. We are required to create access point in specified bucket. 

What is access point?

While bucket policies allow access to a specific user or group, this can be difficult to maintain with a large number of users, so AWS created access points.

Go to amazon s3 => buckets => metrolio-grant-some-access-74e985a2

you will find 2 objects in this bucket. click "access points" available in the menubar. Initially there is no access point in the specified bucket.

• there is a button named "create access point", click it

• enter name of the access point and select internet

• as per question user metrolio-accessor is allowed to list all subjects ie s3:ListBucket

• download only those within the data directory ie s3:GetObjectIn resource part there should be 2 lines:

•   "Resource": [

  "arn:aws:iam::407044316022:accesspoint/metrolio-access-point",

           "arn:aws:iam::407044316022:accesspoint/metrolio-access-point/object/data/*"

         ]