jeudi 16 avril 2015

Delete Permissions for files in S3 bucket

My app lets user login using Google Plus. I have a common bucket for all my users. Anyone can upload/download files. But the problem is anyone can delete the file. How do I set the permissions so that anyone can upload/download files, but only the user who has uploaded the file can delete the file? This is my Roles->Inline Policy



{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Action": [
"s3:AbortMultipartUpload",
"s3:DeleteObject",
"s3:GetObject",
"s3:PutObject"
],
"Resource": [
"arn:aws:s3:::uni-cloud/*"
]
}
]
}




Aucun commentaire:

Enregistrer un commentaire