AWS permissions required for sync

Question

I have a windows machine that need to sync a folder with S3.

I try

"C:\Program Files\amazon\AWSCLI\aws.exe" s3 sync components  s3://test/MyTest/ --acl public-read -- cache-control "public, must-revalidate, proxy-revalidate, max-age=1800" 

got error "A client error (AccessDenied) occurred when calling the PutObject operation: Access Denied"

s3 rm and s3 cp for the same directory works fine.

I have the following permissions :

"Sid": "VisualEditor4",             "Effect": "Allow",             "Action": [                 "s3:PutObject",                 "s3:PutObjectAcl"             ],             "Resource":   

Answer 1

You need all this actions:

• s3:DeleteObject
• s3:GetBucketLocation
• s3:GetObject
• s3:ListBucket
• s3:PutObject

Not only PutObject, for get work S3 Sync, use this policy:

{     "Version": "2012-10-17",     "Statement": [         {             "Resource": [                 "arn:aws:s3:::YOUR_BUCKET_NAME",                 "arn:aws:s3:::YOUR_BUCKET_NAME/*"             ],             "Sid": "Stmt1464826210000",             "Effect": "Allow",             "Action": [                 "s3:DeleteObject",                 "s3:GetBucketLocation",                 "s3:GetObject",                 "s3:ListBucket",                 "s3:PutObject"             ]         }     ] } 

Answer 2

Synchronizing files also requires READ permissions because the AWS Command-Line Interface (CLI) needs to view the existing files to determine whether they already exist or have been modified.

Thus, you will also need to grant ListBucket permission.

If you use aws s3 cp instead of aws s3 sync, then this is not required.