Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

S3 Storage User group List Bucket Permission Bug

See original GitHub issue

The permission is not enough to list bucket. https://stackoverflow.com/questions/38774798/accessdenied-for-listobjects-for-s3-bucket-when-permissions-are-s3 Addition permission block has to be added for list Object.

      {
          "Effect": "Allow",
          "Action": [
              "s3:ListBucket"
          ],
          "Resource": [
              "arn:aws:s3:::bucketname"
          ]
      }

https://github.com/aws-amplify/amplify-cli/blob/master/packages/amplify-category-storage/provider-utils/awscloudformation/cloudformation-templates/s3-cloudformation-template.json.ejs

  <% if (props.groupList) { %>
  <% for(var i=0; i < props.groupList.length; i++) { %>
    "<%= props.groupList[i] %>GroupPolicy": {
      "Type": "AWS::IAM::Policy",
      "Properties": {
        "PolicyName": "<%= props.groupList[i] %>-group-s3-policy",
        "Roles": [
        	{
                "Fn::Join": [
                    "",
                    [
                      {
                        "Ref": "auth<%= props.authResourceName%>UserPoolId"
                      },
                      "-<%= props.groupList[i] %>GroupRole"
                    ]
                ]
            }
        ],
        "PolicyDocument": {
          "Version": "2012-10-17",
          "Statement": [
            {
              "Effect": "Allow",
              "Action": <%- JSON.stringify(props.groupPolicyMap[props.groupList[i]]) %>,
              "Resource": [
                  {
                      "Fn::Join": [
                          "",
                          [
                              "arn:aws:s3:::",
                              {
                                  "Ref": "S3Bucket"
                              },
                              "/*"
                          ]
                      ]
                  }
              ]
            }
          ]
        }
      }
    },
  <% } %>
  <% } %>

Issue Analytics

State:
Created 4 years ago
Reactions:1
Comments:11 (6 by maintainers)

Top GitHub Comments

3reactions

kylekirkbycommented, Mar 30, 2020

For anyone having the same issues - I had to update my storage instance using amplify update storage and allow access through the Individual Groups option. Thanks all for your hard work on this project.

Best regards,

Kyle

3reactions

akshbhucommented, Mar 7, 2020

@wongcyrus @gaochenyue I have reproduces the bug. You can use the policy above mentioned by @gaochenyue to continue your development. In the meantime I am working on the fix