存储桶列表访问权限_如何使用公共读取访问权限创建存储桶？

I´d like to enable Public Read-Access on all items in my Bucket that are in the "public" folder in the serverless.yml file.

Currently this is definition code i use to declare my bucket. Its a bit of copy and paste from one of the serverless-stack examples.

Resources:

AttachmentsBucket:

Type: AWS::S3::Bucket

Properties:

AccessControl: PublicRead

# Set the CORS policy

BucketName: range-picker-bucket-${self:custom.stage}

CorsConfiguration:

CorsRules:

-

AllowedOrigins:

- '*'

AllowedHeaders:

- '*'

AllowedMethods:

- GET

- PUT

- POST

- DELETE

- HEAD

MaxAge: 3000

# Print out the name of the bucket that is created

Outputs:

AttachmentsBucketName:

Value:

Ref: AttachmentsBucket

Now when i try to use a url for a file, it returns access denied. I manually have to set the public read permission for every file by hand in the aws-s3 web interface.

What am i doing wrong?

解决方案

Instead of using CorsConfiguration on the bucket, you need to attach a bucket policy to it. Try the following:

Resources:

AttachmentsBucket:

Type: AWS::S3::Bucket

Properties:

BucketName: range-picker-bucket-${self:custom.stage}

AttachmentsBucketAllowPublicReadPolicy:

Type: AWS::S3::BucketPolicy

Properties:

Bucket: !Ref AttachmentsBucket

PolicyDocument:

Version: "2012-10-17"

Statement:

- Effect: Allow

Action:

- "s3:GetObject"

Resource:

- !Join ['/', [!Ref AttachmentsBucket, 'public']]

Principal: "*"