AWS S3桶策略允許aws機器學習的讀/寫訪問

Question

是否可以創建允許從aws機器學習讀寫權限的S3桶策略？我嘗試了低於策略的策略，但沒有成功。

桶政策：

{ 
    "Version": "2008-10-17", 
    "Statement": [ 
     { 
      "Effect": "Allow", 
      "Principal": { 
       "Service": "machinelearning.amazonaws.com" 
      }, 
      "Action": [ 
       "s3:GetObject", 
       "s3:PutObject" 
      ], 
      "Resource": "arn:aws:s3:::cxra/*" 
     }, 
     { 
      "Effect": "Allow", 
      "Principal": { 
       "Service": "machinelearning.amazonaws.com" 
      }, 
      "Action": "s3:PutObjectAcl", 
      "Resource": "arn:aws:s3:::cxra/*", 
      "Condition": { 
       "StringEquals": { 
        "s3:x-amz-acl": "bucket-owner-full-control" 
       } 
      } 
     }, 
     { 
      "Effect": "Allow", 
      "Principal": { 
       "Service": "machinelearning.amazonaws.com" 
      }, 
      "Action": "s3:ListBucket", 
      "Resource": "arn:aws:s3:::cxra" 
     }, 
     { 
      "Effect": "Allow", 
      "Principal": { 
       "Service": "machinelearning.amazonaws.com" 
      }, 
      "Action": [ 
       "s3:GetBucketLocation" 
      ], 
      "Resource": "arn:aws:s3:::cxra" 
     } 
    ] 
} 

Error screen

Answer 1

仔細檢查你的政策對Granting Amazon ML Permissions to Output Predictions到Amazon S3和Granting Amazon ML Permissions to Read Your Data from Amazon S3

，因爲它們記錄爲兩個獨立的政策，我建議你遵循，而而不是將單一文件中的兩項政策加入進來。這將更容易排除故障。