s3-presigned-put-url's Introduction

Presigned PUT S3 URL

Cors configuration

[
  {
    "AllowedHeaders": ["*"],
    "AllowedMethods": ["PUT"],
    "AllowedOrigins": ["*"],
    "ExposeHeaders": []
  }
]

Configure AWS Permissions

Create an S3 Bucket <your_bucket>
Create an IAM User
Create a Customer Managed Policy called S3FineGrainedAccess

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "sid12332",
      "Effect": "Allow",
      "Action": [
        "s3:PutObject",
        "s3:GetObject",
        "s3:GetBucketTagging",
        "s3:GetBucketCORS",
        "s3:ListBucket",
        "s3:PutBucketCORS",
        "s3:DeleteObject",
        "s3:GetBucketPolicy"
      ],
      "Resource": ["arn:aws:s3:::<your_bucket>/*", "arn:aws:s3:::<your_bucket>"]
    },
    {
      "Sid": "sid23434",
      "Effect": "Allow",
      "Action": "s3:ListAllMyBuckets",
      "Resource": "*"
    }
  ]
}

Replace <your_bucket> with the bucket you have previously created
Create another Customer Managed Policy called GenerateAccessKeyPolicy

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "sid0435890",
      "Effect": "Allow",
      "Action": [
        "iam:DeleteAccessKey",
        "iam:UpdateAccessKey",
        "iam:CreateAccessKey",
        "iam:ListAccessKeys"
      ],
      "Resource": "arn:aws:iam::<account_number>:user/<user_name>"
    }
  ]
}

Replace <account_number> and <user_name> with Account Number and User Name of the created user
Assign an AWS Managed policy called IAMReadOnlyAccess
Now attach both S3FineGrainedAccess and GenerateAccessKeyPolicy to the newly created IAM User

Recommend Projects