How to apply FULL_CONTROL ACL to a bucket

Question 1

I'm new in S3 buckets and currently I'm testing permissions. I applied following ACL for the bucket (owned by user1) so I expected user2 is able to see it and delete but it didn't happen. Could you tell my what is wrong?

{
    "Owner": {
        "DisplayName": "USER1",
        "ID": "USER1"
    },
    "Grants": [
        {
            "Grantee": {
                "DisplayName": "USER1",
                "ID": "USER1",
                "Type": "CanonicalUser"
            },
            "Permission": "FULL_CONTROL"
        },
                        {
            "Grantee": {
                "DisplayName": "USER2",
                "ID": "USER2",
                "Type": "CanonicalUser"
            },
            "Permission": "FULL_CONTROL"
        }
    ]
}

I'm using aws s3api to set this.

Question 2

Using S3 ACL, you grant permission to an AWS account using the email address or the canonical user ID. Your ACL shows how permissions are granted on a newly created bucket to two AWS accounts i.e. USER1 and USER2

Using the profile of any user with access to S3 in the USER2 account, you should be able to list contents of newly created bucket in USER1 account using below AWS CLI command:

aws s3api list-objects --bucket <<newlycreatedbucketname in USER1 account>> --profile <<user in USER2 account>>

For more details, please refer to Access control list (ACL) overview

dossani · Answer 1 · 2021-11-24T03:49:18

Using S3 ACL, you grant permission to an AWS account using the email address or the canonical user ID. Your ACL shows how permissions are granted on a newly created bucket to two AWS accounts i.e. USER1 and USER2

Using the profile of any user with access to S3 in the USER2 account, you should be able to list contents of newly created bucket in USER1 account using below AWS CLI command:

aws s3api list-objects --bucket <<newlycreatedbucketname in USER1 account>> --profile <<user in USER2 account>>

For more details, please refer to Access control list (ACL) overview

How to apply FULL_CONTROL ACL to a bucket

In other languages

This page is in other languages

Popular in the category