Skip to content

"s3:ListBucket" is required to get objects#2

Open
airbone42 wants to merge 2 commits intoeleven41:masterfrom
airbone42:master
Open

"s3:ListBucket" is required to get objects#2
airbone42 wants to merge 2 commits intoeleven41:masterfrom
airbone42:master

Conversation

@airbone42
Copy link

No description provided.

@mwhouser
Copy link
Contributor

What failed if s3:ListBucket was missing?

@airbone42
Copy link
Author

We got a Forbidden for retrieving the object head.

@mwhouser
Copy link
Contributor

Please re-check.

s3.getHead should only require s3:GetObject. I just retested and my policy does not include s3:ListBucket. s3.getHead worked fine.

Is your source bucket in a different region/account or something else unusual?

@airbone42
Copy link
Author

We're working in eu-central-1. The AWS business support brought us to this point. Not sure if it's region-specific.

@mwhouser
Copy link
Contributor

I tried it now in eu-central-1 and again it worked fine without the s3:ListObjects command.

Give your lambda another try with the s3:ListObjects removed. Just have the policy outlined.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants