AWS S3

S3 Buckets are a file repository * Examples: helm charts, images that will now have a url, etc.

Permissions

• You have to set bucket-level permissions

• The permissions are configured with JSON

• The Policy generator will create JSON from the options you select

  • Principal: who is accessesing the resource
  • Action: What you want the principal to be able to do (loosely mapped to CRUD actions)
  • Resource: The ARN of the buckets(s) that the policy will be applied to.

• aws s3 ls shows you all your s3 buckets

• aws sts get-caller-identify shows you the ARN of the user who is making the requests