{"id":207430,"date":"2025-07-08T12:37:12","date_gmt":"2025-07-08T04:37:12","guid":{"rendered":"https:\/\/server.hk\/cnblog\/207430\/"},"modified":"2025-07-08T12:37:12","modified_gmt":"2025-07-08T04:37:12","slug":"%e5%a6%82%e4%bd%95%e9%aa%8c%e8%af%81%e8%b7%a8%e8%b4%a6%e6%88%b7aws-s3%e5%ad%98%e5%82%a8%e6%a1%b6%e6%98%af%e5%90%a6%e5%ad%98%e5%9c%a8%ef%bc%9f","status":"publish","type":"post","link":"https:\/\/server.hk\/cnblog\/207430\/","title":{"rendered":"\u5982\u4f55\u9a8c\u8bc1\u8de8\u8d26\u6237AWS S3\u5b58\u50a8\u6876\u662f\u5426\u5b58\u5728\uff1f"},"content":{"rendered":"

<\/b> <\/p>\n

\u5f53\u524d\u4f4d\u7f6e\uff1a ><\/span> ><\/span> ><\/span> ><\/span> \u5982\u4f55\u9a8c\u8bc1\u8de8\u8d26\u6237AWS S3\u5b58\u50a8\u6876\u662f\u5426\u5b58\u5728\uff1f<\/span><\/p>\n

\u6765\u6e90\uff1astackoverflow<\/span>
\n2024-04-22 15:51:31<\/span>
\n<\/i>0\u6d4f\u89c8<\/span>
\n<\/i>\u6536\u85cf<\/span> <\/p>\n

\u5927\u5bb6\u597d\uff0c\u4eca\u5929\u672c\u4eba\u7ed9\u5927\u5bb6\u5e26\u6765\u6587\u7ae0\u300a\u5982\u4f55\u9a8c\u8bc1\u8de8\u8d26\u6237AWS S3\u5b58\u50a8\u6876\u662f\u5426\u5b58\u5728\uff1f\u300b<\/span>\uff0c\u6587\u4e2d\u5185\u5bb9\u4e3b\u8981\u6d89\u53ca\u5230<\/span><\/span>\uff0c\u5982\u679c\u4f60\u5bf9Golang<\/span>\u65b9\u9762\u7684\u77e5\u8bc6\u70b9\u611f\u5174\u8da3\uff0c\u90a3\u5c31\u8bf7\u5404\u4f4d\u670b\u53cb\u7ee7\u7eed\u770b\u4e0b\u53bb\u5427~\u5e0c\u671b\u80fd\u771f\u6b63\u5e2e\u5230\u4f60\u4eec\uff0c\u8c22\u8c22\uff01<\/p>\n

\u95ee\u9898\u5185\u5bb9
\n <\/p>\n

\u6211\u6709\u4e00\u4e2a\u4f7f\u7528 aws \u8d26\u6237 a \u7684\u5e94\u7528\u7a0b\u5e8f\uff0c\u5b83\u9700\u8981\u68c0\u67e5 aws \u8d26\u6237 b \u4e2d\u7684\u5b58\u50a8\u6876\u662f\u5426\u5b58\u5728\u3002\u5982\u679c\u5b58\u50a8\u6876\u4e0d\u5b58\u5728\uff0c\u90a3\u4e48\u6211\u5e0c\u671b\u5e94\u7528\u7a0b\u5e8f\u5728\u5f00\u59cb\u65f6\u5931\u8d25\u3002<\/p>\n

\u6211\u5df2\u5c06\u5e10\u6237 b \u4e2d\u7684\u5b58\u50a8\u6876\u8bbe\u7f6e\u4e3a \"s3:listbucket\"\u3001\"s3:getobject\"\u3001\"s3:getbucketlocation\"<\/code> \u5230\u5e10\u6237 a\u3002\u6211\u4f7f\u7528\u4e0b\u9762\u7684\u65b9\u6cd5\u83b7\u53d6\u6240\u6709\u5b58\u50a8\u6876\uff0c\u7136\u540e\u5faa\u73af\u8bbf\u95ee\u5217\u8868\u5339\u914d\u8d26\u6237 b \u7684\u5b58\u50a8\u6876\u540d\u79f0\u3002\u6211\u77e5\u9053\u8fd9\u53ea\u4f1a\u7ed9\u51fa\u4ec5\u7531\u8d26\u6237 a \u62e5\u6709\u7684\u5b58\u50a8\u6876\u5217\u8868\u3002<\/p>\n

s3client = s3.new(session)\nlist, err := s3client.listbuckets(nil)<\/pre>\n
\u786e\u5b9a\u5e10\u6237 b \u4e2d\u7684\u5b58\u50a8\u6876\u662f\u5426\u5b58\u5728\u7684\u6700\u4f73\u65b9\u6cd5\u662f\u4ec0\u4e48\uff1f<\/p>\n
\u4ee5\u4e0b\u662f\u8d26\u6237 b \u4e2d\u5b58\u50a8\u6876\u7684\u5b58\u50a8\u6876\u7b56\u7565\uff1a<\/p>\n
{\n    \"Effect\": \"Allow\",\n    \"Principal\": {\n        \"AWS\": \"arn:aws:iam::<accountA_no>:root\"\n    },\n    \"Action\": [\n        \"s3:ListBucket\",\n        \"s3:GetObject\",\n        \"s3:GetBucketLocation\"\n    ],\n    \"Resource\": [\n        \"<AccountB_bucket_arn>\/*\",\n        \"<AccountB_bucket_arn>\"\n    ]\n}<\/pre>\n
 <\/p>\n
\u89e3\u51b3\u65b9\u6848<\/h2>\n
 <\/p>\n
\u6211\u53d1\u73b0\u6211\u4eec\u65e0\u6cd5\u5217\u51fa\u8de8\u8d26\u6237\u5b58\u50a8\u6876(s3client.listbuckets(nil))\u3002\u5b83\u53ea\u4f1a\u8fd4\u56de\u7ecf\u8fc7\u8eab\u4efd\u9a8c\u8bc1\u7684\u7528\u6237\u62e5\u6709\u7684\u5b58\u50a8\u6876\u5217\u8868\u3002\u53c2\u8003<\/p>\n
\u6211\u66f4\u65b0\u4e86\u4ee3\u7801\u4ee5\u4f7f\u7528 listobjectsv2 \u3002 \u5728\u4f7f\u7528listobjectsv2\u51fd\u6570\u4e4b\u524d\uff0c\u6211\u5728\u8d26\u6237a\u4e0a\u8bbe\u7f6e\u4e86\u5982\u4e0b\u7f3a\u5c11\u7684iam\u89d2\u8272\u7b56\u7565\u3002<\/p>\n
{\n        \"Sid\": \"\",\n        \"Effect\": \"Allow\",\n        \"Action\": [\n            \"s3:ListBucket\",\n            \"s3:GetObject\"\n        ],\n        \"Resource\": [\n            \"arn:aws:s3:::account-B-Bucket\/*\",\n            \"arn:aws:s3:::account-B-Bucket\"\n        ]\n    }<\/pre>\n
\u4eca\u5929\u5173\u4e8e\u300a\u5982\u4f55\u9a8c\u8bc1\u8de8\u8d26\u6237AWS S3\u5b58\u50a8\u6876\u662f\u5426\u5b58\u5728\uff1f\u300b\u7684\u5185\u5bb9\u5c31\u4ecb\u7ecd\u5230\u8fd9\u91cc\u4e86\uff0c\u662f\u4e0d\u662f\u5b66\u8d77\u6765\u4e00\u76ee\u4e86\u7136\uff01\u60f3\u8981\u4e86\u89e3\u66f4\u591a\u5173\u4e8e\u7684\u5185\u5bb9\u8bf7\u5173\u6ce8\u516c\u4f17\u53f7\uff01<\/p>\n","protected":false},"excerpt":{"rendered":"
\u5f53\u524d\u4f4d\u7f6e\uff1a > > ...<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4925],"tags":[],"class_list":["post-207430","post","type-post","status-publish","format-standard","hentry","category-4925"],"_links":{"self":[{"href":"https:\/\/server.hk\/cnblog\/wp-json\/wp\/v2\/posts\/207430","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/server.hk\/cnblog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/server.hk\/cnblog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/server.hk\/cnblog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/server.hk\/cnblog\/wp-json\/wp\/v2\/comments?post=207430"}],"version-history":[{"count":0,"href":"https:\/\/server.hk\/cnblog\/wp-json\/wp\/v2\/posts\/207430\/revisions"}],"wp:attachment":[{"href":"https:\/\/server.hk\/cnblog\/wp-json\/wp\/v2\/media?parent=207430"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/server.hk\/cnblog\/wp-json\/wp\/v2\/categories?post=207430"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/server.hk\/cnblog\/wp-json\/wp\/v2\/tags?post=207430"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}