Slide 12
Slide 12 text
※S3に設定したバケットポリシーはこちら
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowInternalRoleAccess",
"Effect": "Allow",
"Principal": {
"AWS": "*"
},
"Action": [
"s3:GetObject",
"s3:ListBucket",
"s3:PutObject",
"s3:DeleteObject"
],
"Resource": [
"${bucket_arn}",
"${bucket_arn}/*"
],
"Condition": {
"StringLike": {
"aws:PrincipalArn": "arn:aws:iam::${account_id}:role/internal-*"
}
}
}
]
事前準備(リソース作成) 12