fineract-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Shaik Nazeer Hussain (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (FINERACT-380) S3 permission issue -- add system property
Date Wed, 18 Jan 2017 12:28:26 GMT

    [ https://issues.apache.org/jira/browse/FINERACT-380?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15827972#comment-15827972
] 

Shaik Nazeer Hussain commented on FINERACT-380:
-----------------------------------------------

Got the update from AWS and see the comments below

The current policy only allows actions on the bucket (like List), it does not allow actions
on objects in the bucket. If this is required, you will need to update the IAM policy as follows:

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Action": [
                "s3:*"
            ],
            "Resource": [
                "arn:aws:s3:::prd-prdbeta",
                "arn:aws:s3:::prd-prdbeta/*"
            ],
            "Effect": "Allow"
        }
    ]
}
A similar example is shown here: http://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_examples.html



> S3 permission issue -- add system property
> ------------------------------------------
>
>                 Key: FINERACT-380
>                 URL: https://issues.apache.org/jira/browse/FINERACT-380
>             Project: Apache Fineract
>          Issue Type: Improvement
>            Reporter: thynn win
>            Assignee: Shaik Nazeer Hussain
>            Priority: Critical
>              Labels: p1
>
> Due to signature version 4 issue, I am unable to use S3 with Mifos.
> Amazon suggested we add a system property and could you please help us add this in the
next version?
> AWS Error Code: InvalidRequest, AWS Error Message: The authorization mechanism you have
provided is not supported. Please use AWS4-HMAC-SHA256.
> http://docs.aws.amazon.com/AmazonS3/latest/dev/UsingAWSSDK.html#specify-signature-version



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message