Skip to content

Latest commit

 

History

History
45 lines (33 loc) · 1.48 KB

README.md

File metadata and controls

45 lines (33 loc) · 1.48 KB
Raw

AWS ACL (Access Control List):

see CONSOLE permissions alt text

AWS Access control list is written is mostly written in xml similar to like this

  <?xml version="1.0" encoding="UTF-8">
<AccessControlPolicy xmlns="http://s3.amazonaws.com/doc/2006-03-01">
    <Owner>
        <ID>AWS_OWNER_USER_ID</ID>
        <DisplayName>owner-display-name</DisplayName>
    </Owner>
    <AccessControlList>
        <Grant>
            <Grantee  xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
                      xsi:type="Canonical User">
                <ID>USER_CANONICAL_ID</ID>
                <DisplayName>display-name</DisplayName>
            </Grantee>
        </Grant>
        <Permission>FULL_CONTROL</Permission>
    </AccessControlList>
</AccessControlPolicy>

Want to get your canonical ID ==> MY Security Credientials > Account identifiers and there you can get can-ID

each default ACL can have up to 100 <GRANT>s

Access Control list ACL mostly similar to like this and you can see Permission tag its a FULL_CONTROL on that on s3 object or a bucket

OR

Through aws cli which is Canned ACL's :

Canned ACL's permissions alt text

You can set acl by using tag in command like this --acl public-read

aws s3 cp ./grantsCONSOLE.png s3://bucketname/public --acl public-read

Now this object is visible public. You can change it everyone public to any user into AWS console