Providing S3 access to MediaPackage for "live-to-VOD"

Question

I am creating a "live-to-VOD" workflow with MediaPackage, and I'm trying to understand how to best implement the correct policy to allow MediaPackage to do it.  
  
I will have many buckets (one per customer), and I need MediaPackage to be able to push assets into all of those buckets. Is there a way to grant MediaPackage access to all buckets with a sort of wildcard, or, does each bucket need to be expressly added in a new and separate policy?

Accepted Answer

Hi chrisatmb, thanks for your query! I can see you've found some documentation on this. It is indeed possible to use wildcards to specify several buckets. For setting up the correct permissions for MediaPackage Live-to-VOD I'd start here:  
  
https://docs.aws.amazon.com/mediapackage/latest/ug/setting-up-create-trust-rel.html  
  
Note there are slightly different policies for VOD Vs Live-to-VOD. This should get you started but please let us know if you have any questions!

Answer

Ah, I see from the following guide that it's possible to use a wildcard for all S3 buckets like so:   
  
arn:aws:s3:::*  
  
https://docs.aws.amazon.com/AmazonS3/latest/dev/s3-arn-format.html

Providing S3 access to MediaPackage for "live-to-VOD"

Relevanter Inhalt