Imagebuilder Pipeline Role Download from S3

Hey,

To allow an AWS Image Builder Pipeline to download files from an S3 bucket, you need to grant the appropriate IAM permissions to the instance profile (role) used by the pipeline.

The following IAM policies must be attached to the IAM role that is associated with the instance profile, in other words, the instance for your pipeline:

1. Single file: s3:GetObject against the bucket/object (for example, arn:aws:s3:::BucketName/*).
2. Multiple files: s3:ListBucket against the bucket/object (for example, arn:aws:s3:::BucketName) and s3:GetObject against the bucket/object (for example, arn:aws:s3:::BucketName/*).

This is documented in more detail here