IAM Policy simulator - unexpected denied ListAllBuckets for S3

Question

When I try the "ListAllBucket" policy it is denied. Why?

The Policy looks like this:

{

"Version":"2012-10-17",

"Statement": [

    {

        "Effect": "Allow",

        "Action": "s3:ListAllMyBuckets",

        "Resource": "arn:aws:s3:::*"

    },

    {

        "Effect": "Allow",

        "Action": "s3:*",

        "Resource": [

            "arn:aws:s3:::<somebucketname>",

            "arn:aws:s3:::<somebucketname>/*"

        ]

    }

]

}

Any help would be appreciated!!

Answer 1

If you expand and see the action listed inside "Action Setting and results", the policy simulator writes about "ListAllBuckets". So Your policy should have "Resource": "*", like:

{

    "Version":"2012-10-17",

    "Statement": [

        {

            "Effect": "Allow",

            "Action": "s3:ListAllMyBuckets",

            "Resource": "*"

        },

        {

            "Effect": "Allow",

            "Action": "s3:*",

            "Resource": [

                "arn:aws:s3:::<somebucketname>",

                "arn:aws:s3:::<somebucketname>/*"

            ]

        }

    ]

}

Do Check out the AWS Certification Course offered by Intellipaat.

Also, you can go through the video tutorial about IAM Policy.