Skip to content

NimTechnology

Trình bày các công nghệ CLOUD một cách dễ hiểu.

  • Kubernetes & Container
    • Docker
    • Kubernetes
      • Ingress
      • Pod
    • Helm Chart
    • OAuth2 Proxy
    • Isito-EnvoyFilter
    • Apache Kafka
      • Kafka
      • Kafka Connect
      • Lenses
    • Vault
    • Longhorn – Storage
    • VictoriaMetrics
    • MetalLB
    • Kong Gateway
  • CI/CD
    • ArgoCD
    • ArgoWorkflows
    • Argo Events
    • Spinnaker
    • Jenkins
    • Harbor
    • TeamCity
    • Git
      • Bitbucket
  • Coding
    • DevSecOps
    • Terraform
      • GCP – Google Cloud
      • AWS – Amazon Web Service
      • Azure Cloud
    • Golang
    • Laravel
    • Python
    • Jquery & JavaScript
    • Selenium
  • Log, Monitor & Tracing
    • DataDog
    • Prometheus
    • Grafana
    • ELK
      • Kibana
      • Logstash
  • BareMetal
    • NextCloud
  • Toggle search form

[Aws] Access S3 or bucket from other account AWS

Posted on September 22, 2022May 24, 2023 By nim No Comments on [Aws] Access S3 or bucket from other account AWS

Bạn muốn workload ở Account B access vào s3 hay bitbucket của account A

root@LP11-D7891:~# aws sts get-caller-identity
{
    "UserId": "AIDATU2QSHIISHPLW6PRV",
    "Account": "250887682577",
    "Arn": "arn:aws:iam::25088768XXXX:user/nim"
}
root@LP11-D7891:~# aws s3 ls s3://access-s3-from-other-account
2022-09-22 23:04:38        348 dev.yaml
Giờ minh cấu hình để Account AWS khác access S3 trên
{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "Statement1",
            "Effect": "Allow",
            "Principal": {
                "AWS": "arn:aws:iam::31336350XXXX:user/CloudOpsAutomation"
            },
            "Action": "*",
            "Resource": "arn:aws:s3:::access-s3-from-other-account/*"
        }
    ]
}

Giờ mình tiền hành run command và kiểm tra access S3 từ other account

root@LP11-D7891:~# aws sts get-caller-identity --profile k8s-nimtechnology-staging
{
    "UserId": "AIDAUR5PLRU2IBJ6C54JW",
    "Account": "31336350XXXX",
    "Arn": "arn:aws:iam::31336350XXXX:user/CloudOpsAutomation"
}
root@LP11-D7891:~# aws s3 ls s3://access-s3-from-other-account --profile k8s-nimtechnology-staging
2022-09-22 23:04:38        348 dev.yaml
root@LP11-D7891:~/demo-kms# aws s3 cp s3://access-s3-from-other-account/dev.yaml . --profile k8s-nimtechnology-staging
download: s3://access-s3-from-other-account/dev.yaml to ./dev.yaml

nếu bạn gặp lỗi: fatal error: An error occurred (403) when calling the HeadObject operation: Forbidden

root@LP11-D7891:~/demo-kms# aws s3 cp s3://access-s3-from-other-account/dev.yaml ./ --profile k8s-nimtechnology-staging
fatal error: An error occurred (403) when calling the HeadObject operation: Forbidden

thi bạn kiểm tra lại Resource đã được cấu hình chính sác chưa?

mình ví dụ bạn muốn download file s3://access-s3-from-other-account/dev.yaml
nhưng bạn lại set là “Resource”: “arn:aws:s3:::access-s3-from-other-account”

==> thì bạn sẽ bị lỗi fatal error: An error occurred (403) when calling the HeadObject operation: Forbidden

AWS - Amazon Web Service

Post navigation

Previous Post: [Python] The eval() function automatically calculates a string
Next Post: [AWS] Encrypting data when stored in S3

More Related Articles

[AWS] AWS Load Balancer Controller and Ingress are Installed by Terraform Helm Provider on EKS. AWS - Amazon Web Service
[AWS] Pull images from ECR AWS - Amazon Web Service
[EKS windows] Using EKS terraform module to install K8S windows with manage node Group mode. AWS - Amazon Web Service
[Kaniko/Bitbucket/ECR] Accomplish the workflow: CI by bitbucket pipeline, Kaniko build image and push image to ECR AWS - Amazon Web Service
[S3] You will naturally see files on S3 being deleted AWS - Amazon Web Service
[EKS]networkPlugin cni failed to set up pod “pod—xxxxx” network: add cmd: failed to assign an IP address to container AWS - Amazon Web Service

Leave a Reply Cancel reply

Your email address will not be published. Required fields are marked *

Tham Gia Group DevOps nhé!
Để Nim có nhiều động lực ra nhiều bài viết.
Để nhận được những thông báo mới nhất.

Recent Posts

  • [Laravel] Laravel Helpful June 26, 2025
  • [VScode] Hướng dẫn điều chỉnh font cho terminal June 20, 2025
  • [WordPress] Hướng dấn gửi mail trên WordPress thông qua gmail. June 15, 2025
  • [Bitbucket] Git Clone/Pull/Push with Bitbucket through API Token. June 12, 2025
  • [Teamcity] How to transfer the value from pipeline A to pipeline B June 9, 2025

Archives

  • June 2025
  • May 2025
  • April 2025
  • March 2025
  • February 2025
  • January 2025
  • December 2024
  • November 2024
  • October 2024
  • September 2024
  • August 2024
  • July 2024
  • June 2024
  • May 2024
  • April 2024
  • March 2024
  • February 2024
  • January 2024
  • December 2023
  • November 2023
  • October 2023
  • September 2023
  • August 2023
  • July 2023
  • June 2023
  • May 2023
  • April 2023
  • March 2023
  • February 2023
  • January 2023
  • December 2022
  • November 2022
  • October 2022
  • September 2022
  • August 2022
  • July 2022
  • June 2022
  • May 2022
  • April 2022
  • March 2022
  • February 2022
  • January 2022
  • December 2021
  • November 2021
  • October 2021
  • September 2021
  • August 2021
  • July 2021
  • June 2021

Categories

  • BareMetal
    • NextCloud
  • CI/CD
    • Argo Events
    • ArgoCD
    • ArgoWorkflows
    • Git
      • Bitbucket
    • Harbor
    • Jenkins
    • Spinnaker
    • TeamCity
  • Coding
    • DevSecOps
    • Golang
    • Jquery & JavaScript
    • Laravel
    • NextJS 14 & ReactJS & Type Script
    • Python
    • Selenium
    • Terraform
      • AWS – Amazon Web Service
      • Azure Cloud
      • GCP – Google Cloud
  • Kubernetes & Container
    • Apache Kafka
      • Kafka
      • Kafka Connect
      • Lenses
    • Docker
    • Helm Chart
    • Isito-EnvoyFilter
    • Kong Gateway
    • Kubernetes
      • Ingress
      • Pod
    • Longhorn – Storage
    • MetalLB
    • OAuth2 Proxy
    • Vault
    • VictoriaMetrics
  • Log, Monitor & Tracing
    • DataDog
    • ELK
      • Kibana
      • Logstash
    • Fluent
    • Grafana
    • Prometheus
  • Uncategorized
  • Admin

Copyright © 2025 NimTechnology.