We need a working AWS account with the following resources configured:
- A bucket with a file: I will be using a bucket name awsseccookbook with a file named image-heartin-k.png. Replace these with your own bucket name and filename.
- A user with no permission and a user with administrator permission: Configure CLI profiles for these users. I will name users and their profiles testuser and awssecadmin, respectively.
It is good practice to add users to groups and give permissions to these groups instead of directly assigning permissions to users.
- Uncheck the two Block all public access settings related to ACLs. Leave the other settings checked and click Save:
We can manage block public access settings for a bucket by going ...