Advanced Clusters

Back Next

Amazon S3 actions

The following table lists the Amazon S3 actions that the cluster operator role requires and the resources that each action must apply to:

Action	Resource
s3:GetBucketLocation	"arn:aws:s3:::<cluster-staging-bucket-name>" "arn:aws:s3:::<cluster-logging-bucket-name>"
s3:GetEncryptionConfiguration	"arn:aws:s3:::<cluster-staging-bucket-name>" "arn:aws:s3:::<cluster-logging-bucket-name>"
s3:ListBucket	"arn:aws:s3:::<cluster-staging-bucket-name>" "arn:aws:s3:::<cluster-logging-bucket-name>"
s3:PutObject	"arn:aws:s3:::<cluster-staging-dir>/" "arn:aws:s3:::<cluster-logging-dir>/"
s3:GetObjectAcl	"arn:aws:s3:::<cluster-staging-dir>/" "arn:aws:s3:::<cluster-logging-dir>/"
s3:GetObject	"arn:aws:s3:::<cluster-staging-dir>/" "arn:aws:s3:::<cluster-logging-dir>/"
s3:DeleteObject	"arn:aws:s3:::<cluster-staging-dir>/" "arn:aws:s3:::<cluster-logging-dir>/"
s3:PutObjectAcl	"arn:aws:s3:::<cluster-staging-dir>/" "arn:aws:s3:::<cluster-logging-dir>/"