How to separate bucket access by user?

[KaueTech]

I would like a step-by-step guide on how to create a user and grant them access to a specific bucket, both for reading and writing.

However, I don’t want them to have access to any other buckets—only their own.

[loverustfs]

Hi @KaueTech ,

You can write policies to specify the resources that users can access. "Resource"

For example:

{
  "ID": "",
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "",
      "Effect": "Allow",
      "Action": [
        "s3:GetObject",
        "s3:GetBucketLocation"
      ],
      "NotAction": [],
      "Resource": [
        "arn:aws:s3:::test/*"
      ],
      "NotResource": [],
      "Condition": {}
    }
  ]
}

[zlyuancn]

How to make the bucket object accessible to the outside world, for example, to make the images publicly available

[kitty314]

在v1.0.0-beta.10上可以把储存桶访问策略设置成

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "PublicReadGetObject",
      "Effect": "Allow",
      "Principal": "*",
      "Action": "s3:GetObject",
      "Resource": "arn:aws:s3:::桶名/*"
    }
  ]
}