Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

This policy contains the following error: Has prohibited field Principal For more information about the IAM policy grammar,

See original GitHub issue

The policy on the tutorial does not work.

{
   "Version": "2012-10-17",
   "Statement": [
      {
         "Sid": "GiveSESPermissionToWriteEmail",
         "Effect": "Allow",
         "Principal": {
            "Service": "ses.amazonaws.com"
         },
         "Action": "s3:PutObject",
         "Resource": "arn:aws:s3:::S3-BUCKET-NAME/*",
         "Condition": {
            "StringEquals": {
               "aws:Referer": "AWS-ACCOUNT-ID"
            }
         }
      }
   ]
}

Issue Analytics

State:
Created 4 years ago
Comments:7

Top GitHub Comments

3reactions

planetahuevocommented, Feb 24, 2020

Can someone explain how you sort this out? I am having the same issue. Thanks

0reactions

Zylescommented, Apr 10, 2019

Got it to work.

Top Results From Across the Web

Resolve the IAM policy error "Has prohibited field Principal"

Resolution. Make sure policies using the Principal element are created with the AWS service associated with the AWS resource, not within IAM.

AWS Trust Policy Has prohibited field Principal - Stack Overflow

Based upon the error message, it seems like you're putting the trust policy in the normal spot, because Roles don't need a principle...

Unable to create trust policy for central account ... - GitHub

This policy contains the following error: Has prohibited field Principal For more information about the IAM policy grammar, see AWS IAM Policies ......

Policy has Prohibited field Principal AWS Error [Solved]

The "Policy has Prohibited field Principal" AWS error occurs because we're trying to set a Principal field on a permissions policy. The Principal...

Formatting IAM policy to grant S3 external permission

However, the console is not accepting it claiming: 'This policy contains the following error: Has prohibited field Principal." Thanks. Follow Comment.