search

ncihtan / IDP

1 stars 0 forks source link

Grant access to OHSU S3 bucket to HMS IAM role user #1

Closed jmuhlich closed 3 years ago

jmuhlich commented 4 years ago

The ARN of our role user is as follows: arn:aws:iam::292075781285:user/idp-import

xdoan commented 4 years ago

@jmuhlich you should have access to s3://htan-dcc-ohsu now!

jmuhlich commented 3 years ago

I can list and get objects, but not put. If that's the expected permissions then we're all set.

xdoan commented 3 years ago

I think that's expected, do you require put permissions?

xdoan commented 3 years ago

@jmuhlich just remembered that you're probably getting access denied because we require an extra flag when people put objects into buckets so we have full control over them: https://ncihtan.github.io/HTAN-Data-Ingress-Docs/programmatic-upload-aws-cli.html

jmuhlich commented 3 years ago

I didn't need put permissions, just testing the boundaries. Good to know about the docs for upload though. I think this is resolved.