S3 bucketpolicy 和 EMR - 示例

Question

I can not find example of S3 BucketPolicy that allows only EMR to read data from it. EMR would be in the same account as S3. Anyone has any example to share?

Answer 1

I guess this will work.

{
  "Id": "Policy1590853624822",
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "Stmt1590853616750",
      "Action": "s3:*",
      "Effect": "Allow",
      "Resource": [
        "arn:aws:s3:::my-bucket",
        "arn:aws:s3:::my-bucket/*"
      ],
      "Principal": {
        "AWS": [
          "arn:aws:elasticmapreduce:us-east-1:1234567890:cluster/*"
        ]
      }
    }
  ]
}

You can create your own policies here in aws policy generator