Can I share an Amazon S3 bucket between Amazon S3 users?

Is it possible to split the bucket between some S3 users?

I have an S3 account for user me@myself.com who can manage the bucket my_bucket. Can I share this bucket with S3 users " you@yourself.com " and " youtoo@yourself.com "? those. Do they log in to their S3 account and see my bucket?

If not, is there a way to do this? With a bucket policy?

I'm confused ... thanks for your reply.

Fro_oo

+4
source share
3 answers

You can split buckets between existing AWS users without using IAM.

Using the console (or API), add bucket permissions for each AWS user. In the Recipient field, add the user email address or the canonical user ID (to get this, log in to your AWS account, go to the Security Accounts account, scroll down the page and click the link to open the identifier)

The only problem I see is that there seems to be no way to access these shared buckets in the AWS console. But many of the third-party tools provide this tool, and you can access them using the API.

+10
source

You can use s3cmd to do this.

  • First, determine the canonical identifier of the user with whom you want to share the bucket.
  • Both sides install s3cmd and set credentials: s3cmd --configure
  • The bucket owner does this: s3cmd setacl --acl-grant=read:<canonical-user-id> s3://BUCKETNAME[/OBJECT]
  • The recipient can see the bucket: s3cmd ls s3://BUCKETNAME[/OBJECT]

Note. In addition to read, write, read_acp, write_acp, full_control, all of this is possible when write_acp means that the user can change access permissions.

+3
source

Take a look at AWS Identity and Access Management (IAM).

+1
source

All Articles