S3 Bucket Policy Doesn't Work Due to API Response Error

Hi there,

Hi there,

When I typed the code chunk below, the below error message came back.

{ "Version": "2012-10-17", "Statement": [ { "Sid": "AllowS3ReadAccess", "Principal": { "AWS": "arn:aws:iam::398113668163:role/S3DynamoDBFullAccessRole" }, "Effect": "Allow", "Action": "s3:", "Resource": [ "arn:aws:s3:::employee-web-app-photo-bucket-sr-001", "arn:aws:s3:::employee-web-app-photo-bucket-sr-001/" ] } ] }

Unknown Error An unexpected error occurred. API response Invalid principal in policy

The action is "s3:", but this will result in an error. The following is an error if you do not describe the S3 operation required for the action. It also appears from the errors that there is a problem with the "Principal". Make sure this "arn:aws:iam::398113668163:role/S3DynamoDBFullAccessRole" exists in your AWS account. An error will occur if you do not have an IAM role. Also, please make sure that the S3 ARN listed in the resource is also changed to yours, or you will get an error.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "AllowS3ReadAccess",
      "Principal": {
        "AWS": "arn:aws:iam::398113668163:role/S3DynamoDBFullAccessRole"
      },
      "Effect": "Allow",
      "Action": "s3:Get*",
      "Resource": [
        "arn:aws:s3:::employee-web-app-photo-bucket-sr-001",
        "arn:aws:s3:::employee-web-app-photo-bucket-sr-001/*"
      ]
    }
  ]
}