Support making the bucket public, in that anyone can download files unauthenticated if they know the URL

[simonw]

This can be considered a subset of:

• Support configuring the bucket as a website #21

[simonw]

As far is I can tell the best way to do this is to attach a bucket policy: https://boto3.amazonaws.com/v1/documentation/api/latest/reference/services/s3.html#S3.Client.put_bucket_policy

response = client.put_bucket_policy(
    Bucket="examplebucket",
    Policy='{"Version": "2012-10-17", ... ] } ]}',
)

I think the policy I need is this one (found variants of it in a few different places online):

{
  "Version":"2012-10-17",
  "Statement":[{
      "Sid":"AllowAllGetObject",
      "Effect":"Allow",
      "Principal": "*",
      "Action":["s3:GetObject"],
      "Resource":["arn:aws:s3:::examplebucket/*"
      ]
    }
  ]
}

[simonw]

I got this working, but the files I upload with s3-credentials put-object all have Content-Type: binary/octet-stream.

[simonw]

I started with --create-bucket --public-bucket but I'm going to go with --create-bucket --public instead, it seems neater and I think it's clear what it's going to do.