如何在授予公共訪問權限的情況下將文件上傳到AWS S3？

Question

我正在使用aws示例代碼將文件上傳到S3，但是當他們上傳文件時，任何人都無法訪問，即使將存儲桶設為對所有人公開，唯一的讀取方法是手動將文件設置為S3控制台以提供公共訪問權限。

為MyService：

@Override
public int onStartCommand(Intent intent, int flags, int startId) {
    if (intent != null && intent.getStringExtra(INTENT_KEY_NAME) != null) {
        final String key = intent.getStringExtra(INTENT_KEY_NAME);
        final File file = (File) intent.getSerializableExtra(INTENT_FILE);
        final String transferOperation = intent.getStringExtra(INTENT_TRANSFER_OPERATION);
        TransferObserver transferObserver;

        switch (transferOperation) {
            case TRANSFER_OPERATION_DOWNLOAD:
                Log.d(TAG, "Downloading " + key);
                transferObserver = transferUtility.download("aws-MYBUCKET", key, file);
                transferObserver.setTransferListener(new DownloadListener());
                break;
            case TRANSFER_OPERATION_UPLOAD:
                Log.d(TAG, "Uploading " + key);
                transferObserver = transferUtility.upload("aws-MYBUCKET", key, file);
                transferObserver.setTransferListener(new UploadListener());
                break;
        }
        return START_STICKY;
    } else return START_NOT_STICKY;

Answer 1

您應該創建一個存儲桶策略 。 這可以授予整個存儲桶或部分存儲桶的公共訪問權限。

從存儲桶策略示例-Amazon Simple Storage Service ：

{
  "Version":"2012-10-17",
  "Statement":[
    {
      "Sid":"AddPerm",
      "Effect":"Allow",
      "Principal": "*",
      "Action":["s3:GetObject"],
      "Resource":["arn:aws:s3:::examplebucket/*"]
    }
  ]
}

這比授予對單個對象的訪問權限更可取。