Unable to list s3 buckets using IAM user with AdministratorAccess and AmazonS3FullAccess

Question

Hello Folks,

I created an IAM user as per best practice and granted this user the following policies:

1. **AdministratorAccess**
`{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": "*",
            "Resource": "*"
        }
    ]
}`
2. **AmazonS3FullAccess**
`{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": [
                "s3:*",
                "s3-object-lambda:*"
            ],
            "Resource": "*"
        }
    ]
}`

And configured the AWS CLI to use the Access keys for the IAM user. When trying to list all the buckets on the account using the IAM user, I am getting the following error:
An error occurred (AccessDenied) when calling the ListBuckets operation: Access Denied

Don't understand why it's returning an AccessDenied error as the IAM user has the necessary permission to be able to run any action on any resource. Would appreciate some help/guidance on this. Thank you!

Accepted Answer

There could be a mismatch somewhere, run `aws configure list` to show the actual credentials that you are using in the AWS CLI right now, and verify that the (partially obscured) `access_key` and `secret_key` are those that you expect to be using.

Answer

Run the following command to make sure you are the principle you think you are.
```
aws sts get-caller-identity
```
If that is correct, check to see if there is a bucket policy on the bucket that might be denying your request.

Unable to list s3 buckets using IAM user with AdministratorAccess and AmazonS3FullAccess

相关内容