[ AWS ] S3 將儲存桶內的檔案預設公開讀取
12 Dec 2017
這次的要求：
Make bucket-files public
##Edit bucket Policy
到 AWS -> S3 -> Bucket -> Permission -> Bucket policy 的頁籤
點開後可以看到Bucket policy editor貼上以下這段
{
"Version": "2012-10-17",
"Statement": [{
"Sid": "MakeItPublic",
"Effect": "Allow",
"Principal": "*",
"Action": "s3:GetObject",
"Resource": "arn:aws:s3:::yourbucketname.com/*"
}]
}| 名稱 | 說明 |
|---|---|
| Effect | 同意或拒絕，Allow, deny |
| Principal | 此規則的適用對象，*, {user-arn}, {group-arn} |
| Action | 設定開放的權限，上面的範例是僅開放GetObject這項權限，也可以填入*開放全部權限(不建議) |
| Resource | source bucket arn |
2017-12-14 補充:
Policy的規則是可以同時設定很多項的，以下是範例 ↓
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "SavePolicy",
"Effect": "Allow",
"Principal": {
"AWS": "arn:aws:iam::1234567891011:user/user-name"
},
"Action": "s3:*",
"Resource": "arn:aws:s3:::butcket-name/*"
},
{
"Sid": "MakeItPublic",
"Effect": "Allow",
"Principal": "*",
"Action": "s3:GetObject",
"Resource": "arn:aws:s3:::butcket-name/*"
}
]
}第一段 SavePolicy 是開放S3全部權限給某一使用者(arn)，第二段 MakeItPublic 是只開放讀取給全部使用者(*)
參考：https://tiffanybbrown.com/2014/09/making-all-objects-in-an-s3-bucket-public-by-default/index.html