Give User Access To Only One S3 Bucket Only
ฝัง
- เผยแพร่เมื่อ 20 ส.ค. 2024
- awswithatiq.com
Sometimes we need to create a user who has access to only one bucket. In that situation, we need to create an IAM policy first. After that, we need to assign that policy to that user.
AWS policy generator, where you can generate your IAM policy
awspolicygen.s...
*******
Buy Domain: shareasale.com...
Buy Hosting: partners.hostg...
Canva for Online Image editor: partner.canva....
Grammarly: shareasale.com...
******
You're welcome!
you explained in simple manner and it is easy to understand....your way of speaking is good and i am expecting more videos from you....................
Thank you so much 🙂 for your comment. Definitely I will add more video's in future. Checkout my blog as well for some other AWS tips awswithatiq.com
Thank you Atiq! I appreciate your help!
Happy to help
very good i was use real environment ...
Thanks
Very good and Usefull video - This helped a lot
Glad to hear that!
If needs only read access instead of write access then where needs to change from JSON?
Instead of selecting 'All actions', you need to select 'Get object' and 'List buckets' actions.
Thank you very much
You are welcome
Thanks, It really helped
Welcome
Very useful video
Thanks!
Glad you think so!
Very good, thank you!
Glad you liked it!
it helped, thanks!!!
Glad to hear it!
How can we give access for a specific ip address, like our mac address only have allow to do put operation, can u plz do a video on this, I couldn't find any video on this scenario in youtube
Thanks Anil for your comment. I will create a new tutorial on this topic. By the way, you can follow my blog to get more tutorials on aws here awswithatiq.com
@@AWSWithAtiq thank you
@@AWSWithAtiq I'm waiting for your video sir.
I found some blogs but those are not working.
After giving system ip as deny then also it was able to updating the Bucket content
Very good.......
Thanks for your comment
Ok thankyou, this is for IAM user, how to do if I want to give access to only one AWS account and restrict access for all?
You can by creating a bucket policy for that specific account.
Thanks. Good video. How do you allow a user to download folders in bucket?
Good question! use s3browser.com/
This code is giving me a "allow the s3:ListBuckets action" error. I can't list any buckets at all.
Please assign IAM role to the ec2 instance
@@AWSWithAtiq I am not using an ec2 instance but I did get the buckets to list. I had to use "s3:ListAllMyBuckets" and a "Resource": "arn:aws:s3:::*" which I don't want to do. This allows the IAM user to see all my buckets. I am trying to give the IAM user access to only see their own bucket name. Any suggestions?
@@B.I.T.S Any update on how did you fix this pls?
Thank you boy
Welcome
Nice video
Thanks
Awesome, I love that
Glad you liked it
@@AWSWithAtiq you're welcome sir
hi, I want to allow a IAM user to access only a folder in a S3 Bucket (for backup/restore my Wordpress website) can I do so? I am following these same steps but the user can't access the folder...
Probably that is not possible at the moment when I am writing this. I suggest you to create a new bucket and give permission
@@AWSWithAtiq Thank you for replying, I came across this article and video and it resolves my question. Policiy allowing a specific IAM user to see specific folders at the first level of the bucket and then to take action on objects in the desired folders and subfolders.
How to 1aws account access to cress account s3 bucket.... Plz reply me
How to do in aws.. Send the step
Here I have shown, how you can give access to another account th-cam.com/video/eeRl5bjf9Bs/w-d-xo.html
do you not also have to add a policy to the s3 bucket itself? w/ a bucket policy?
No bucket policy required using this approach.
hi bro i have a bucket which has 3 folders. is this possible to show only one folder to a user? don't want to show all folders in bucket.
That is not possible
@@AWSWithAtiq ohh ok bro thanks
i am unable to rename object from this way. can you help me
Error: Access denied
policy:
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "VisualEditor0",
"Effect": "Allow",
"Action": "s3:*",
"Resource": [
"arn:aws:s3:::test/*",
"arn:aws:s3:::test"
]
}
]
}
Use aws iam policy generator
@@AWSWithAtiq same Error after using AWS Policy Generator
Azure FTW!
Didn't know about Azure
how did you get the account ID
like your account id once you sign in jack
Go to IAM dashboard, and then you can see your account id