The EC2 instance has an IAM role assigned to it allowing it the full access to S3. I think this would allow any user in that instance to access S3, like issuing command aws s3 ls. But it turns out that only the default ec2-user and root(using sudo) are allowed. What should I do to grant any user in the instance to access S3 without having to use sudo?
User in an EC2 instance that’s assigned a S3 full access role can’t access S3
587 Views Asked by xczzhh At
1
There are 1 best solutions below
Related Questions in AMAZON-S3
- Convert JSON.gz to JSON in node js
- Downloading objects from S3 with presigned URL
- "Access Denied" - User's Permissions to S3 Bucket
- jQuery file upload to S3 (and rails) with CORS headers
- copying file from local machine to Ubuntu 12.04 returning permission denied
- AWS Flow Framework: Can we run activity worker and activity task on different EC2 instances
- Unable to access files from public s3 bucket with boto
- s3cmd not working as cron-task when echos/dates are added
- AWS S3 object listing
- React-native upload image to amazons s3
- S3 restrictions on quantity of object downloads
- How to upload a photo in Meteor to S3 and have it sync to database item?
- Limit upload size to S3 with presigned URL
- dragonfly-s3 with S3 IAM user causing a forbidden 403 response from Amazon
- Split S3 files into multiple output files
Related Questions in AMAZON-EC2
- Using HDFS with Apache Spark on Amazon EC2
- How can I access Mule ESB Community edition via browser?
- AWS EC2: Migrating from Windows to Linux Server
- AWS Flow Framework: Can we run activity worker and activity task on different EC2 instances
- How to fix WordPress HTTPS issues when behind an Amazon Load Balancer?
- Determine Deployment Group from appspec.yml
- easy_install does not configure SimpleITK properly
- Bad Request (400) while hosting osqa to AWS EC2
- AWS CLI for EBS snapshots
- test-kitchen: how to read platform specific attributes in kitchen.yml
- Best way to store shared files between ec2 instances
- WebSocket connection failed: WebSocket opening handshake was canceled
- Rails scheduled task behind a load balancer
- Install google mod- pagespeed on elastic beanstalk on every instance added
- ELB generating 504 GATEWAY_TIMEOUTS w/ 2 EC2 instances - Packets not reaching Servers
Related Questions in AWS-SDK
- What's the difference between BatchGetItem and Query in DynamoDB?
- iOS: How do I create an AWS DynamoDB batch read request?
- Should I instantiate an object every request or once upon app launch?
- How to configure aws CLI to s3 cp with anonymous user
- No hash key condition is applicable to the specified index
- https fails for java sdk for aws-s3
- aws-sdk ruby returns nil when deleting object
- Amazon marketplace barcode to product quantity
- stream response from nodejs request to s3
- Loop through list of AWS-instances shows only first item
- Put file on S3 with AWS SDK 2 & Cognito for unauth users using iOS SDK 2
- Retrieving image url with specific access privileges using AWS Mobile SDK for Android
- Is AmazonSimpleNotificationServiceClient thread-safe?
- Ruby aws-sk: undefined method
- How to copy/move all objects in Amazon S3 from one prefix to other using the AWS SDK for Node.js
Related Questions in AWS-CLI
- AWS CLI for EBS snapshots
- Getting "[Errno 14] Bad address" when using Trickle with AWS CLI
- aws command line interface - aws ec2 wait - Max attempts exceeded
- How do I set the name of the default profile in AWS CLI?
- aws cli installed by spark-ec2 from spark-1.4 is out of date
- How do I unlock or delete an AWS S3 bucket that inadvertently locked with a bucket policy?
- Amazon EC2 get tag from CLI - no credentials
- jq json parsing - replace timestamp to date using todate, and flat an array
- Getting already utilized AWS Reserved Instances in AWS?
- Get ARN of S3 Bucket with aws cli
- Update cloudformation stack from aws cli with SAM transform
- AWS CLI access to S3 returns error 104
- HTTP Code 400 getting objectfrom AWS S3 bucket with Boto3 in python
- Is there a way to create EMR security config with CloudFormation/Terraform
- Mount EBS volume to a running AWS instance with a script
Related Questions in CLOUD-SECURITY
- Ensure that App Engine applications enforce HTTPS connections
- Aws config for Api security monitoring
- Google cloud load balancer dynamically adding backend buckets
- Google Cloud Function 403 for internal authenticated requests
- How To Export GCP Security Command Center Findings To BigQuery?
- AWS Config - Resource discovery stuck on "Your resources are being discovered"
- How to restrict/deny data access to an application system administrator
- User in an EC2 instance that’s assigned a S3 full access role can’t access S3
- GCP create organization from command line or through API
- xss-attack took place in our webapp hosted in Azure. How to find the IP address of the attacker Machine?
- what would happen to ServiceAccount when we switch from Fine grain to Uniform in Google cloud
- How to handle keys and credentials when deploying to Google Cloud Functions?
- Access Amazon S3 from a Java program
- Guardduty not able to detect attacks outside the Aws
- How do I ensure only my enterprise devices can sync from google drive sync or file stream
Trending Questions
- UIImageView Frame Doesn't Reflect Constraints
- Is it possible to use adb commands to click on a view by finding its ID?
- How to create a new web character symbol recognizable by html/javascript?
- Why isn't my CSS3 animation smooth in Google Chrome (but very smooth on other browsers)?
- Heap Gives Page Fault
- Connect ffmpeg to Visual Studio 2008
- Both Object- and ValueAnimator jumps when Duration is set above API LvL 24
- How to avoid default initialization of objects in std::vector?
- second argument of the command line arguments in a format other than char** argv or char* argv[]
- How to improve efficiency of algorithm which generates next lexicographic permutation?
- Navigating to the another actvity app getting crash in android
- How to read the particular message format in android and store in sqlite database?
- Resetting inventory status after order is cancelled
- Efficiently compute powers of X in SSE/AVX
- Insert into an external database using ajax and php : POST 500 (Internal Server Error)
Popular Questions
- How do I undo the most recent local commits in Git?
- How can I remove a specific item from an array in JavaScript?
- How do I delete a Git branch locally and remotely?
- Find all files containing a specific text (string) on Linux?
- How do I revert a Git repository to a previous commit?
- How do I create an HTML button that acts like a link?
- How do I check out a remote Git branch?
- How do I force "git pull" to overwrite local files?
- How do I list all files of a directory?
- How to check whether a string contains a substring in JavaScript?
- How do I redirect to another webpage?
- How can I iterate over rows in a Pandas DataFrame?
- How do I convert a String to an int in Java?
- Does Python have a string 'contains' substring method?
- How do I check if a string contains a specific word?
I am facing the same issue and resolved by doing below steps. First i have checked the ~/.aws/credentials file on both user. /home/ec2-user/.aws/credentials /root/.aws/credentials
now i have commented the aws key and secret key in /root/.aws/credentials
like this.
this is all because root user is using the different access keys to access the aws resources.