Amazon S3上传失败-访问被拒绝

Question

I am trying to upload files via AWS Amplify to an existing s3 bucket.
I am not using use AWS MobileHub .
I created new Identity Pool according to this guide and in the end this is my policy for this role:

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "VisualEditor0",
            "Effect": "Allow",
            "Action": [
                "s3:*",
                "mobileanalytics:PutEvents",
                "cognito-sync:*"
            ],
            "Resource": "*"
        }
    ]
}

In my code, I configured Amplify as follows:

Amplify.configure({
  'aws_cognito_identity_pool_id': 'us-east-2:f37baa...',
  'aws_cognito_region': 'us-east-2',
  'aws_user_files_s3_bucket': 'demo',
  'aws_user_files_s3_bucket_region': 'us-east-1',
});

And I am getting the error:

Error: Access Denied
    at Request.extractError (s3.js:580)
    at Request.callListeners (aws-sdk-core-react-native.js:3610)
    at Request.emit (aws-sdk-core-react-native.js:3582)
    at Request.emit (aws-sdk-core-react-native.js:7723)
    at Request.transition (aws-sdk-core-react-native.js:7062)
    at AcceptorStateMachine.runTo (aws-sdk-core-react-native.js:7867)
    at aws-sdk-core-react-native.js:7879
    at Request.<anonymous> (aws-sdk-core-react-native.js:7078)
    at Request.<anonymous> (aws-sdk-core-react-native.js:7725)
    at Request.callListeners (aws-sdk-core-react-native.js:3620)

UPDATE

import Amplify from 'aws-amplify';
import { Storage } from 'aws-amplify';

Amplify.configure({
  'aws_cognito_identity_pool_id': 'us-east-2:f37...',
  'aws_cognito_region': 'us-east-2',
  'aws_user_files_s3_bucket': 'demo',
  'aws_user_files_s3_bucket_region': 'us-east-1',
});

export default class App extends Component<Props> {
...
uploadImage = async uri => {
    const fileName = 'example.jpg';
    await Storage.put(fileName, blob, {
      contentType: 'image/jpeg',
      level: 'public'
    }).then(data => console.log(data))
      .catch(err => console.log(err))

This is the whole code, and I just didn't add a file to get but it works for sure. When I use mobile hub aws-exports.js , I can upload the files, but MobileHub creates some bucketsm and my use-case involves using my existing bucket.

Answer 1

So if I understand well, your code is trying to access existing S3 buckets, not the one created by Amplify / Mobile Hub?

If I am correct, you'll need to update the Cognito policies to grant access to your users to the existing S3 Bucket.

In IAM -> Roles console, you will find two roles created by Amplify. Role names are YOUR_PROJECT____DATE_TAG___[un]authrole For example in my console : photoalbums-20190202155011-unauthRole and photoalbums-20190202155011-authRole

Depending if you want to grant access to authenticated users or unauthenticated users, modify the appropriate role, or both roles if you want both authenticated and unauthenticated user to have access to S3.

Adding the S3 managed policy AmazonS3ReadOnlyAccess will grant your user a read only access to your bucket. (Please do not add AmazonS3FullAccess or s3:* as it will give your user to create and delete buckets and objects on your account)