Bucket policy correction

[Dev4rno]

Hi, firstly thanks for this awesome package! I integrated this into my app a while back and I absolutely love it. After a long needed update of all my npm packages, I noticed the documentation and setup for this had slightly changed since the last time I checked, so I decided to start from scratch.

After creating a new bucket and IAM user as described in the docs, I was receiving an irritating PUT: 403 Access Denied, and after some quick research I found: The "403 Forbidden" error can occur due to the following reasons: Permissions are missing for s3:PutObject to add an object or s3:PutObjectAcl to modify the object's ACL.

I noticed that the suggested bucket policy only contains "Action": "s3:GetObject", and after modifying this to "Action": [ "s3:GetObject", "s3:PutObject"]" everything started working fine and dandy. I'm still not sure if this was an error on my behalf but I really followed the documentation as strictly as possible, and just thought that this would be worth mentioning.

Thanks again for making the upload process so simple 👍

[ryanto]

Nice catch! Does this updated policy look right?

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "Statement1",
      "Effect": "Allow",
      "Principal": "*",
      "Action": ["s3:GetObject", "s3:PutObject"],
      "Resource": "arn:aws:s3:::BUCKET_NAME/*"
    }
  ]
}

[Dev4rno]

Sorry for the late reply, yes thats exactly how mine looks!

[ryanto]

Thanks Alex! I'll do some testing and report back :)