Skip to content
Author: ytianle

Create an IAM⚓︎

  • 步骤
  • AWS 控制台 → IAM → Users → Create user
  • 勾选 “Access key - Programmatic access”
  • 给这个用户挂一个只读写你桶的策略（最小权限）
  • 创建后拿到 Access Key ID / Secret Access Key
  • 在本地运行 aws configure 填进去

最小权限策略（把桶名替换成你的）： * { * * "Version": "2012-10-17", * "Statement": [ * { * * "Sid": "ListBucket", * "Effect": "Allow", * "Action": ["s3:ListBucket"], * "Resource": "arn:aws:s3:::marcus-photograph-garage" * }, * { * "Sid": "ReadWriteObjects", * "Effect": "Allow", * "Action": ["s3:GetObject", "s3:PutObject", "s3:DeleteObject"], * "Resource": "arn:aws:s3:::marcus-photograph-garage/*" * } * ] * }