Política de intervalo S3 para permitir UserAgent “Chef Client”
{ “Version”: “2012-10-17”, “Id”: “<snip>”, “Statement”: [ { “Sid”: “<snip>”, “Effect”: “Deny”, “Principal”: “*”, “Action”: “s3:GetObject”, “Resource”: “arn:aws:s3:::<bucket name>/*”, “Condition”: { “StringNotLike”: { “aws:UserAgent”: “*Chef *” } } } ]}
Continuar lendo