Permissions required for aws cp vs aws sync commands when the IAM user and S3 Bucket is in the same AWS Account.

0

I want to copy objects into my S3 bucket. What permissions do I need to give my IAM user ( same account) to perform copy using 1. aws s3 cp command ? 2. aws s3 sync command?

2 回答
2
已接受的回答

To run aws s3 cp, you need to allow s3:GetObject and s3:PutObject for your IAM User. To run the command aws s3 cp with the --recursive option( if you are copying multiple objects at once), you need permission to s3:GetObject, s3:PutObject, and s3:ListBucket. To run the command aws s3 sync, then you need permission to s3:GetObject, s3:PutObject, and s3:ListBucket. You may need additional permissions for performing copy on versioned objects or to copy those objects with tags. To copy a specific version of an object, you need the permission for s3:GetObjectVersion in addition to s3:GetObject. For copying objects that have object tags, your IAM identity must have s3:GetObjectTagging ( on the source object)and s3:PutObjectTagging permissions ( on the destination bucket)

AWS
已回答 2 年前
profile picture
专家
A_J
已审核 14 天前
0

Hi

You need additional permissions for sync

https://aws.amazon.com/premiumsupport/knowledge-center/s3-access-denied-listobjects-sync/

When you run the aws s3 sync command, Amazon S3 issues the following API calls: ListObjectsV2, CopyObject, GetObject, and PutObject. Also, sync can delete objects as well, so you might need DeleteObject if you use the --delete option

profile pictureAWS
专家
Matt-B
已回答 2 年前

您未登录。 登录 发布回答。

一个好的回答可以清楚地解答问题和提供建设性反馈,并能促进提问者的职业发展。

回答问题的准则