awsへのgit backupが失敗しています

Question

s3への私のgitのバックアップは、403 forbiddenエラーで失敗しています。私のgitと呼ばれるIAMユーザーを作成し、ユーザーにポリシーを添付した、ユーザーおよびポリシーがテラフォームを使用して作成されますが、私は403禁断のエラーを取得しています、plsは

# Create IAM user policy 

resource "aws_iam_user_policy" "gitlab_policy" { 
    name = "bi-git-policy" 
    user = "${aws_iam_user.gitlab.name}" 

    policy = <<EOF 
{ 
    "Version": "2012-10-17", 
    "Statement": [ 
     { 
     "Sid" : "gitbucket", 
     "Effect": "Allow", 
     "Action": [ 
      "s3:GetBucketlocation", 
      "s3:ListAllMyBuckets" 
     ], 
     "Resource": [ "*" ] 
     }, 
     { 
     "Sid" : "gitlistbucket", 
     "Effect": "Allow", 
     "Action": ["s3:ListBucket"], 
     "Resource": ["arn:aws:s3:::***_${var.environment}"] 
     }, 
     { 
     "Sid" : "gitgetputbucket", 
     "Effect": "Allow", 
     "Action": [ 
      "s3:GetBucketAcl", 
      "s3:GetBucketLocation", 
      "s3:PutObjectAcl", 
      "s3:PutObject", 
      "s3:GetObjectAcl", 
      "s3:GetObject", 
      "s3:ListMultipartUploadParts", 
      "s3:AbortMultipartUpload" 
     ], 
     "Resource": ["arn:aws:s3:::***_${var.environment}/*"] 
    } 
    ] 
} 
EOF 

Answer 1

は、このポリシーを試すのに役立ちます。

{ 
     "Version": "2012-10-17", 
     "Statement": [ 
      { 
       "Effect": "Allow", 
       "Action": [ 
        "s3:GetBucketLocation", 
        "s3:ListAllMyBuckets" 
       ], 
       "Resource": "arn:aws:s3:::*" 
      }, 
      { 
       "Effect": "Allow", 
       "Action": [ 
        "s3:ListBucket" 
       ], 
       "Resource": [ 
        "arn:aws:s3:::***_${var.environment}" 
       ] 
      }, 
      { 
       "Effect": "Allow", 
       "Action": [ 
        "s3:PutObject", 
        "s3:PutObjectAcl" 
       ], 
       "Resource": [ 
        "arn:aws:s3:::***_${var.environment}/*" 
       ] 
      } 
     ] 
    }