S3 bucket policy current example

[Andro (Andrew Bernard)]

Referring to this topic on how to set up an S3 bucket policy for Discourse:

Setting up file and image uploads to S3

So, you want to use S3 to handle image uploads? Here’s the definitive guide: S3 registration Head over to https://aws.amazon.com/free/ and click on [Create a Free Account] During the create account process, make sure you provide payment information, otherwise you won’t be able to use S3. There’s no registration fee, you will only be charged for what you use, if you exceed the AWS Free Usage Tier. Bucket Go to S3 and click on Create bucket, then fill out the Bucket name. Remember this name bec…

it appears to be out of date, and missing things currently needed, such as Principal information. Is there any more current advice on what to do? I know I am asking to be spoon fed, but as one poster pointed out this is more or less black magic to most people and any help would be appreciated. I am specifically referring just to the given bucket policy example, not the entire thread.

[tggm (Tiago Matias)]

I also have this issue. The s3:HeadBucket action does not exist and AWS throws a ton of errors about the policy.

[Andro (Andrew Bernard)]

I spent time learning about the policy concepts. I developed this which works, but it’s all wide open, and so needs considerable refinement. But it does allow you to get on and setup all the rest of the requirements for S3 storage for Discourse. A starting point that currently works, at least.

{
    "Version": "2012-10-17",
    "Id": "Policy1640915383804",
    "Statement": [
        {
            "Sid": "Stmt1640915382266",
            "Effect": "Allow",
            "Principal": "*",
            "Action": "s3:*",
            "Resource": [
                "arn:aws:s3:::xyzzy-file-uploads",
                "arn:aws:s3:::xyzzy-file-uploads/*"
            ]
        }
    ]
}