IAM Policy for OpsCenter backup to S3 user

后端 未结 1 435
情话喂你
情话喂你 2021-01-07 05:45

Using OpsCenter 5.1.0 and trying to add S3 as a location for snapshot backups. What are the necessary permissions in AWS IAM for the opscenter user? So far, I have the follo

相关标签:
1条回答
  • 2021-01-07 06:09

    After some trial and error, I found that the following policy worked

    { "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": [ "s3:ListAllMyBuckets", "s3:GetBucketLocation" ], "Resource": "arn:aws:s3:::*" }, { "Effect": "Allow", "Action": [ "s3:ListBucket", "s3:GetBucketLocation", "s3:GetBucketAcl" ], "Resource": [ "arn:aws:s3:::prod-bkup" ] }, { "Effect": "Allow", "Action": [ "s3:DeleteObject", "s3:GetObject", "s3:PutObject" ], "Resource": [ "arn:aws:s3:::prod-bkup/*" ] } ] }

    EDIT: added s3:GetBucketAcl as a required permission

    0 讨论(0)
提交回复
热议问题