AWS - S3 & CLI - Bucket Policy DEMO | Cross-account access with IAM user

[@vivekbajpai7197]

Awesome video, very well explained

[@knowledgeindia]

Please share this video if it helped you.. Also, look at our playlists - kzbin.infoplaylists

[@karthikeyanc749]

Hi Sir, Thank you for the video. It helps us to understand about the CLI use cases. Say If i want to access via Management console, then i should create Roles in this use case right ?

[@mohankumarsharma-c2v]

how can we access bucket of diff acc through IAM ROLE?

[@ahmedafb]

Have you tried taking backup of RDS and then pushing it to S3-->Glacier? any video on this scenario?

[@knowledgeindia]

RDS snapshot remains in S3. It cannot be moved to Glacier.

[@satyam70]

Here you are trying to show how an aws user belonging from other aws can access the object .

[@TheHoneymittal]

Hi Sir, you show the s3 buckets in cli version of aws. Can we see these buckets in gui version when we do set permission that access from other aws root account or user account. How can we see it. I m trying to replication but its not showing buckets from other region. Could you please solve it.

[@knowledgeindia]

No Mohit from GUI it won't be visible because you gave Bucket level permissions to other account. This works for CLI/API only. Please recommend us on LinkedIn, write a Testimonial if you learned the concept and your questions are answered -- in.linkedin.com/in/knowledgeindia Please help us to spread the knowledge to others as well; please SUBSCRIBE to our KZbin Channel & LIKE and SHARE the videos if they helped you to learn. We have many more videos on AWS topics, these are organized in playlists here -- kzbin.infoplaylists You can subscribe to our blog to receive useful AWS related content -- aws-tutorials.blogspot.com

[@NaveenKumar-or1rf]

Thank You. Very nice explanation! Is it not possible to give s3 bucket access to some user in same account via s3 bucket policy instead of giving access to that user in IAM ? I am trying the same but unable to access s3 buckets.

[@knowledgeindia]

You can do that, if that second user at least has IAM permission to call the s3 actions

[@ManishKumar-dl2ux]

Hello Sir , I am getting an error below once I am trying to save the policy document after giving list and put permissions to a user in a different account. Have also tried to play with Block public access but it is not working. Any suggestions deeply appreciated. Error Action does not apply to any resource(s) in statement Granting public access in this policy will be blocked because Block public access settings are turned on for this bucket. To determine which settings are turned on, check your Block public access

[@knowledgeindia]

there is a new setting at bucket level (a flag) - that needs to be changed. after that only you can enable public access.

[@vijjiocean]

can we do the same in gui? sir

[@knowledgeindia]

you can apply bucket policy in GUI. but you cannot access buckets in another account from the S3 console of your account. Do not forget to share the video with your friends.. Thank you..

[@nocode659]

The access key id and the secret access are for the bucket or for the user? Please

[@knowledgeindia]

Please learn IAM first.

[@knowledgeindia]

its for user

[@nocode659]

Sure

[@satyam70]

Struggling to understand difference between bucket level policy and object level policy

[@knowledgeindia]

Object level applies to a single object. Bucket level applies to all objects in the bucket (or the condition specified in the bucket policy).

[@satyam70]

How can we give access to non aws user to s3 bucket ??

[@knowledgeindia]

The access could be either to Public or an AWS user. If you want to give to an outside user then it goes via an AWS user with API calls.

[@FahadKhan_faz]

Was looking for a video tutorial to set bucket policy to S3 bucket via CLI. Disappointed.

[@animeshkanabar]

too many ads

[@knowledgeindia]

Sorry!! I will try to put video lessons on Udemy.