AWS S3 跨账户访问 Cross Account Access

AWS S3跨账户访问设置方法

原创

于 2025-01-17 11:18:21 发布 · 588 阅读

0 ·

CC 4.0 BY-SA版权

文章标签：

#aws #云计算

进入S3对应的存储桶，上面选项选权限，存储桶策略 -- 编辑，输入对应的policy。

完全控制，包含上传删除权限，policy如下：

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "cross",
            "Effect": "Allow",
            "Principal": {
                "AWS": "arn:aws:iam::123456789:root"
            },
            "Action": "s3:*",
            "Resource": [
                "arn:aws:s3:::bucket",
                "arn:aws:s3:::bucket/*"
            ]
        }
    ]
}

只读权限policy：

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Principal": {
                "AWS": "arn:aws:iam::123456789:root"
            },
            "Action": "S3:ListBucket",
            "Resource": "arn:aws:s3:::bucket",
            "Condition": {}
        },
        {
            "Effect": "Allow",
            "Principal": {
                "AWS": "arn:aws:iam::123456789:root"
            },