Advanced Clusters

Back Next

Amazon S3 actions

The following table describes the Amazon S3 actions that the master role requires and the resources that each action must apply to:

Action	Resource	Description
s3:GetBucketLocation	"arn:aws:s3:::<cluster-staging-bucket-name>" "arn:aws:s3:::<cluster-logging-bucket-name>" "arn:aws:s3:::<cluster-init-script-bucket-name>"	Required. The action must apply to the initialization script location if you use an initialization script to start the cluster.
s3:GetEncryptionConfiguration	"arn:aws:s3:::<cluster-staging-bucket-name>" "arn:aws:s3:::<cluster-logging-bucket-name>"	Required
s3:ListBucket	"arn:aws:s3:::<cluster-staging-bucket-name>" "arn:aws:s3:::<cluster-logging-bucket-name>" "arn:aws:s3:::<cluster-init-script-bucket-name>"	Required. The action must apply to the initialization script location if you use an initialization script to start the cluster.
s3:PutObject	"arn:aws:s3:::<cluster-staging-dir>/" "arn:aws:s3:::<cluster-logging-dir>/"	Required
s3:GetObjectAcl	"arn:aws:s3:::<cluster-staging-dir>/" "arn:aws:s3:::<cluster-logging-dir>/"	Required
s3:GetObject	"arn:aws:s3:::<cluster-staging-dir>/" "arn:aws:s3:::<cluster-logging-dir>/" "arn:aws:s3:::<cluster-init-script-dir>/*"	Required. The action must apply to the initialization script location if you use an initialization script to start the cluster.
s3:DeleteObject	"arn:aws:s3:::<cluster-staging-dir>/" "arn:aws:s3:::<cluster-logging-dir>/"	Required
s3:PutObjectAcl	"arn:aws:s3:::<cluster-staging-dir>/" "arn:aws:s3:::<cluster-logging-dir>/"	Required