![AWS S3 存储桶 - 允许从特定 AWS 帐户将文件下载到每个 IAM 和用户](https://linux22.com/image/763053/AWS%20S3%20%E5%AD%98%E5%82%A8%E6%A1%B6%20-%20%E5%85%81%E8%AE%B8%E4%BB%8E%E7%89%B9%E5%AE%9A%20AWS%20%E5%B8%90%E6%88%B7%E5%B0%86%E6%96%87%E4%BB%B6%E4%B8%8B%E8%BD%BD%E5%88%B0%E6%AF%8F%E4%B8%AA%20IAM%20%E5%92%8C%E7%94%A8%E6%88%B7.png)
寻找一个 S3 存储桶策略,该策略允许来自不同帐户的所有 IAM 角色和用户能够从位于我的 AWS 帐户中的存储桶下载文件。
感谢帮助
答案1
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "Example permissions",
"Effect": "Allow",
"Principal": {
"AWS": "arn:aws:iam::AccountB-ID:root"
},
"Action": [
"s3:GetBucketLocation",
"s3:ListBucket"
],
"Resource": [
"arn:aws:s3:::awsexamplebucket1"
]
}
]
}
直接从文档。