Missing required field Principal - Amazon S3 - Bucket Policy

Question

I'm trying to resize hosted images in amazon s3 using AWS Lamba. I followed the following tutorial which is given by Amazon.

Tutorial

however, when I tried to update my bucket policy it always gives an error as "Missing required field Principal"

This is my policy code:

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "logs:CreateLogGroup",
        "logs:CreateLogStream",
        "logs:PutLogEvents"
      ],
      "Resource": "arn:aws:logs:*:*:*",
    },
    {
      "Effect": "Allow",
      "Action": "s3:PutObject",
      "Resource": "arn:aws:s3:::yyyy",
      "Principal":{"AWS":"arn:aws:iam::123456789:user/xxxxx"}     
    }
  ]
}

I Couldn't understand why I'm getting the error. What am I doing wrong?

Answer 1

This is actually not an S3 bucket policy, but a policy document that grants permissions to your Lambda function to write logs to CloudWatch and put the objects to your S3 bucket.

Please see how to set up that: https://www.screencast.com/t/SjD72va1Zso

Answer 2

I'm trying to resize hosted images in amazon s3 using AWS Lamba. I followed the following tutorial which is given by Amazon.

Tutorial

however, when I tried to update my bucket policy it always gives an error as "Missing required field Principal"

This is my policy code:

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "logs:CreateLogGroup",
        "logs:CreateLogStream",
        "logs:PutLogEvents"
      ],
      "Resource": "arn:aws:logs:*:*:*",
    },
    {
      "Effect": "Allow",
      "Action": "s3:PutObject",
      "Resource": "arn:aws:s3:::yyyy",
      "Principal":{"AWS":"arn:aws:iam::123456789:user/xxxxx"}     
    }
  ]
}

I Couldn't understand why I'm getting the error. What am I doing wrong?