aws-quickstart / quickstart-clickhouse-cluster

AWS Quick Start Team
Apache License 2.0
14 stars 16 forks source link

Cluster Node does not have access to ListObjects IAM permission #43

Open sandeeppnaik opened 2 years ago

sandeeppnaik commented 2 years ago

When I use s3 function to access multiple files, I get an access denied error for Access Denied error for ListObjects

The IAM policy on the EC2 is as following: https://github.com/aws-quickstart/quickstart-clickhouse-cluster/blob/328d5276a2854165385db14497e7f700f114d5b7/templates/clickhouse.template.yaml#L460

I reckon it needs to be broadened with another policy to access multiple objects using wildcards

{ "Action": "s3:ListBucket", "Effect": "Allow", "Resource": "arn:aws:s3:::BUCKET" }