Enable stesachs@amazon.com to run `s3 sync` on a `pcluster/` sub-bucket

spack / spack-infrastructure

Spack Kubernetes instance and services running there (GitLab, CDash, spack.io)

Other

19 stars 20 forks source link

Enable stesachs@amazon.com to run `s3 sync` on a `pcluster/` sub-bucket #978

Closed stephenmsachs closed 6 days ago

stephenmsachs commented 2 weeks ago

s3:CopyObjects and s3:ListObjects are not registered as IAM s3 actions. Fixes #977

mvandenburgh commented 2 weeks ago

@stephenmsachs I'm getting error MalformedPolicy: Action does not apply to any resource(s) in statement back from AWS when I try to apply this.

stephenmsachs commented 2 weeks ago

Thanks for testing. I am out of the office for a week now and will have to go look at this after that.

stephenmsachs commented 1 week ago

I found the error causing Action does not apply to any resource(s) in statement. s3:ListBucket needs to be applied to a bucket, not a key. This setup should work now. I have tested it locally.

mvandenburgh commented 6 days ago

Applied :heavy_check_mark: