Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

CREATE_FAILED | AWS::S3::BucketPolicy | (Service: S3, Status Code: 403) #1029

Open
hellofadude opened this issue Apr 29, 2024 · 0 comments
Open
Labels
bug This issue is a bug. needs-triage This issue or PR still needs to be triaged.

Comments

@hellofadude
Copy link

Describe the bug

Static-site-stack - Python

If you are using an identity other than the root user (i.e. user with administrative credentials in Identity center per best practice) of the AWS account that owns the bucket, the calling identity must have the PutBucketPolicy permissions on the specified bucket and belong to the bucket owner's account in order to use this operation.

If you don't have PutBucketPolicy permissions, Amazon S3 returns a 403 Access Denied error

Expected Behavior

stack deploys correctly

Current Behavior

stack fails creation

Reproduction Steps

cdk deploy

Possible Solution

Add a s3:PutBucketPolicy action to the PolicyStatement

Additional Information/Context

No response

CDK CLI Version

2.139.0 (build 2699ffd)

Framework Version

No response

Node.js Version

v20.0.0

OS

Ubuntu 22.04.4 LTS

Language

Python

Language Version

3.10.12

@hellofadude hellofadude added bug This issue is a bug. needs-triage This issue or PR still needs to be triaged. labels Apr 29, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug This issue is a bug. needs-triage This issue or PR still needs to be triaged.
Projects
None yet
Development

No branches or pull requests

1 participant