Viewing 7 posts - 1 through 7 (of 7 total)
  • Author
    Posts
  • prophoto Friend
    #189744

    I am getting message ‘The Amazon Webservice Account that you provided is incorrect. Please check it again!’ when adding account created in Amazon IAM with full permissions for this bucket. Please provide troubleshooting steps.

    Thanh Nguyen Viet Friend
    #502396

    Hello prophoto,

    Could you please send us PM for your administrator account, so we can help you to check and resolve this issue.

    prophoto Friend
    #502510

    <em>@prophoto 384895 wrote:</em><blockquote>Please provide troubleshooting steps.</blockquote>

    As requested please provide troubleshooting steps. This site is on a local dev box. We are able to connect with primary s3 login not account created in IAM. What are required permissions for IAM user?

    Thanh Nguyen Viet Friend
    #502625

    Hello Prophoto,

    I have tried to create IAM user and grant it permission to access S3 service, everything worked properly.
    Here is an instruction for create IAM account to manage for AWS resource:

    I. To get started using IAM, sign in to the AWS Management Console
    Login with your AWS account

    II. Create User Group

    III. Create new IAM User


    Save this Credentials Information in this step, you will use it instead of Amazon S3 credential

    IV. Assign user to S3 Access Group

    FYI: you can apply this guide to grant other AWS resource to IAM account

    prophoto Friend
    #503345

    I only want the user to have access to a single bucket.

    Thanh Nguyen Viet Friend
    #503547

    If you want to grant permission to IAM user for access only specific bucket, you need update policy for User group that mentioned above step:

    in Policy Document textarea field, you need enter below code

    {
    "Statement": [
    {
    "Action": "s3:*",
    "Effect": "Allow",
    "Resource": [
    "arn:aws:s3:::ja-joomla-3.1/*"
    ]
    }
    ]
    }

    Replacing ja-joomla-3.1 with your bucket name.

    If you need assign more buckets to that user, you can update above code to

    {
    "Statement": [
    {
    "Action": "s3:*",
    "Effect": "Allow",
    "Resource": [
    "arn:aws:s3:::ja-joomla-3.1/*",
    "arn:aws:s3:::bucket.1/*",
    "arn:aws:s3:::bucket.2/*"
    ]
    }
    ]
    }

    Note: in back-end of JA Amazon S3 component, you might still browse and see all bucket with above account, but you can only upload/delete/and update ACL for objects in specified buckets

    prophoto Friend
    #507829

    This works although I am still getting an error message when saving the account.

Viewing 7 posts - 1 through 7 (of 7 total)

This topic contains 7 replies, has 2 voices, and was last updated by  prophoto 11 years, 1 month ago.

We moved to new unified forum. Please post all new support queries in our New Forum