s3桶策略訪問被拒絕

我想從aws-sdk-js上s3上的對象，但不能找出我的情況的政策。我想只允許一個用戶擁有上傳權限和公開閱讀權限。s3桶策略訪問被拒絕

這裏是我的S3存儲政策

{ 
    "Version": "2012-10-17", 
    "Statement": [ 
     { 
      "Sid": "PublicReadForGetBucketObjects", 
      "Effect": "Allow", 
      "Principal": { 
       "AWS": "*" 
      }, 
      "Action": "s3:GetObject", 
      "Resource": "arn:aws:s3:::some-bucket/*" 
     }, 
     { 
      "Sid": "", 
      "Effect": "Allow", 
      "Principal": { 
       "AWS": "arn:aws:iam::1111111111111:user/some-bucket-user" 
      }, 
      "Action": "s3:*", 
      "Resource": "arn:aws:s3:::some-bucket/*" 
     } 
    ] 
}

和我的IAM策略是：

{ 
    "Version":"2012-10-17", 
    "Statement":[ 
    { 
     "Sid":"AddPerm", 
     "Effect":"Allow", 
     "Action":"s3:*", 
     "Resource":["arn:aws:s3:::some-bucket/*"] 
    } 
    ] 
}

可有人請指出我在做什麼錯在這裏？

來源

2017-08-03 Farhan Salam