Skip to content

NimTechnology

Trình bày các công nghệ CLOUD một cách dễ hiểu.

  • Kubernetes & Container
    • Docker
    • Kubernetes
      • Ingress
    • Helm Chart
    • Isito-EnvoyFilter
    • Apache Kafka
      • Kafka
      • Kafka Connect
      • Lenses
    • Vault
    • Longhorn – Storage
    • VictoriaMetrics
    • MetalLB
    • Kong Gateway
  • CI/CD
    • ArgoCD
    • ArgoWorkflows
    • Spinnaker
    • Jenkins
    • Harbor
    • TeamCity
    • Git
      • Bitbucket
  • Coding
    • Terraform
      • GCP – Google Cloud
      • AWS – Amazon Web Service
    • Golang
    • Laravel
    • Python
    • Jquery & JavaScript
    • Selenium
  • Log & Monitor
    • DataDog
    • Prometheus
    • Grafana
    • ELK
      • Kibana
      • Logstash
  • BareMetal
    • NextCloud
  • Toggle search form

[Aws] Access S3 or bucket from other account AWS

Posted on September 22, 2022 By nim No Comments on [Aws] Access S3 or bucket from other account AWS

Bạn muốn workload ở Account B access vào s3 hay bitbucket của account A

root@LP11-D7891:~# aws sts get-caller-identity
{
    "UserId": "AIDATU2QSHIISHPLW6PRV",
    "Account": "250887682577",
    "Arn": "arn:aws:iam::25088768XXXX:user/nim"
}
root@LP11-D7891:~# aws s3 ls s3://access-s3-from-other-account
2022-09-22 23:04:38        348 dev.yaml
Giờ minh cấu hình để Account AWS khác access S3 trên
{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "Statement1",
            "Effect": "Allow",
            "Principal": {
                "AWS": "arn:aws:iam::31336350XXXX:user/CloudOpsAutomation"
            },
            "Action": "*",
            "Resource": "arn:aws:s3:::access-s3-from-other-account/*"
        }
    ]
}

Giờ mình tiền hành run command và kiểm tra access S3 từ other account

root@LP11-D7891:~# aws sts get-caller-identity --profile k8s-mdaas-staging
{
    "UserId": "AIDAUR5PLRU2IBJ6C54JW",
    "Account": "313363500340",
    "Arn": "arn:aws:iam::31336350XXXX:user/CloudOpsAutomation"
}
root@LP11-D7891:~# aws s3 ls s3://access-s3-from-other-account --profile k8s-mdaas-staging
2022-09-22 23:04:38        348 dev.yaml
root@LP11-D7891:~/demo-kms# aws s3 cp s3://access-s3-from-other-account/dev.yaml . --profile k8s-mdaas-staging
download: s3://access-s3-from-other-account/dev.yaml to ./dev.yaml

nếu bạn gặp lỗi: fatal error: An error occurred (403) when calling the HeadObject operation: Forbidden

root@LP11-D7891:~/demo-kms# aws s3 cp s3://access-s3-from-other-account/dev.yaml ./ --profile k8s-mdaas-staging
fatal error: An error occurred (403) when calling the HeadObject operation: Forbidden

thi bạn kiểm tra lại Resource đã được cấu hình chính sác chưa?

mình ví dụ bạn muốn download file s3://access-s3-from-other-account/dev.yaml
nhưng bạn lại set là “Resource”: “arn:aws:s3:::access-s3-from-other-account”

==> thì bạn sẽ bị lỗi fatal error: An error occurred (403) when calling the HeadObject operation: Forbidden

AWS - Amazon Web Service

Post navigation

Previous Post: [Python] The eval() function automatically calculates a string
Next Post: [AWS] Encrypting data when stored in S3

More Related Articles

Manage Kubernetes Secrets With External Secrets Operator AWS - Amazon Web Service
[AWS] Deploying Redis on AWS AWS - Amazon Web Service
[Terraform] – Terraform Beginner – Lesson 5: Terraform Provisioners and creating EC2 AWS - Amazon Web Service
[Terraform] Error: InvalidPermission.Duplicate: the specified rule AWS - Amazon Web Service
[AWS] How to increase the disk size of a Windows EC2 machine? AWS - Amazon Web Service
[Terraform] – Terraform Beginner – Lesson 9: Terraform with AWS – part 2 AWS - Amazon Web Service

Leave a Reply Cancel reply

Your email address will not be published. Required fields are marked *

Tham Gia Group DevOps nhé!
Để Nim có nhiều động lực ra nhiều bài viết.
Để nhận được những thông báo mới nhất.

Recent Posts

  • Experiences for IP Addresses Shortage on EKS Clusters March 29, 2023
  • [Talisman] Discover the sensitive information in your code. March 28, 2023
  • [Prometheus/Grafana] Install Prometheus and Grafana on ubuntu. March 27, 2023
  • [Kong Gateway] WebSocket connection failed March 26, 2023
  • [Nextcloud] Can’t download files to have a size bigger than 2Gi on NextCloud – RaspBerry March 24, 2023

Archives

  • March 2023
  • February 2023
  • January 2023
  • December 2022
  • November 2022
  • October 2022
  • September 2022
  • August 2022
  • July 2022
  • June 2022
  • May 2022
  • April 2022
  • March 2022
  • February 2022
  • January 2022
  • December 2021
  • November 2021
  • October 2021
  • September 2021
  • August 2021
  • July 2021
  • June 2021

Categories

  • BareMetal
    • NextCloud
  • CI/CD
    • ArgoCD
    • ArgoWorkflows
    • Git
      • Bitbucket
    • Harbor
    • Jenkins
    • Spinnaker
    • TeamCity
  • Coding
    • Golang
    • Jquery & JavaScript
    • Laravel
    • Python
    • Selenium
    • Terraform
      • AWS – Amazon Web Service
      • GCP – Google Cloud
  • Kubernetes & Container
    • Apache Kafka
      • Kafka
      • Kafka Connect
      • Lenses
    • Docker
    • Helm Chart
    • Isito-EnvoyFilter
    • Kong Gateway
    • Kubernetes
      • Ingress
    • Longhorn – Storage
    • MetalLB
    • Vault
    • VictoriaMetrics
  • Log & Monitor
    • DataDog
    • ELK
      • Kibana
      • Logstash
    • Grafana
    • Prometheus
  • Uncategorized
  • Admin

Copyright © 2023 NimTechnology.