Re: [S3tools-general] How to use IAM roles

[Sajan P. <sa...@no...>]

Did you try the config I posted to the list a while ago?  I'd been using 
that config for a long while without any issues, even before any sort of 
support in S3Tools.

I created an IAM user, attached the policy I posted before and used the 
key and secret key for that particular user like normal in s3cmd 
--configure.

Has worked like a charm for a while, and I haven't updated s3cmd in months.

Sajan Parikh
/Owner, Noppix LLC/

e: sa...@no...
p: (563) 726-0371

Noppix LLC Logo
On 07/05/2013 09:45 PM, Rich Mogull wrote:
> Sajan,
>
> Here;s the policy I'm using that doesn't seem to work. This is 
> *before* running ---config, since I'm trying to figure out how to 
> script a cloud-init download of some security credentials. Running 
> "s3cmd ls" gives me the access denied error.
>
> Thank you for the help,
>
> {
>    "Version": "2012-10-17",
>    "Statement": [
>      {
>        "Effect": "Allow",
>        "Action": [
>          "s3:Get*",
>          "s3:List*"
>        ],
>        "Resource": "arn:aws:s3:::<my bucket>"
>      }
>    ]
> }
>
> Rich Mogull
> rm...@se... <mailto:rm...@se...>
> AIM: Securosis
> Skype: rmogull
> work+blog: http://securosis.com
>
> On Jul 4, 2013, at 1:58 PM, Sajan Parikh <sa...@no... 
> <mailto:sa...@no...>> wrote:
>
>> Here's something that should get your started.  It would've helped if 
>> you showed us what your config currently looks like.
>>
>> {
>>   "Statement": [
>>     {
>>       "Effect": "Allow",
>>       "Action": "*",
>>       "Resource": [
>>         "arn:aws:s3:::your-bucket-name",
>>         "arn:aws:s3:::your-bucket-name/*"
>>       ],
>>       "Condition": {}
>>     }
>>   ]
>> }
>> Sajan Parikh
>> /Owner, Noppix LLC/
>>
>> e:sa...@no...
>> p: (563) 726-0371
>>
>> <emailsiglogo.png>
>> On 07/04/2013 03:19 PM, Rich Mogull wrote:
>>> Does anyone have hints on using s3cmd with IAM roles? I have a role established and assigned to my EC2 instance, but after installing s3cmd I still get access denied. I don't see anything in the documentation. For example, do I need to create a special config file? Is there a command line parameter?
>>>
>>> Thanks
>>>
>>> ------------------------------------------------------------------------------
>>> ThisSF.net  <http://SF.net>  email is sponsored by Windows:
>>>
>>> Build for Windows Store.
>>>
>>> http://p.sf.net/sfu/windows-dev2dev
>>> _______________________________________________
>>> S3tools-general mailing list
>>> S3t...@li...
>>> https://lists.sourceforge.net/lists/listinfo/s3tools-general
>>
>> ------------------------------------------------------------------------------
>> ThisSF.net <http://sf.net/>email is sponsored by Windows:
>>
>> Build for Windows Store.
>>
>> http://p.sf.net/sfu/windows-dev2dev_______________________________________________
>> S3tools-general mailing list
>> S3t...@li... 
>> <mailto:S3t...@li...>
>> https://lists.sourceforge.net/lists/listinfo/s3tools-general
>
>
>
> ------------------------------------------------------------------------------
> This SF.net email is sponsored by Windows:
>
> Build for Windows Store.
>
> http://p.sf.net/sfu/windows-dev2dev
>
>
> _______________________________________________
> S3tools-general mailing list
> S3t...@li...
> https://lists.sourceforge.net/lists/listinfo/s3tools-general