AWS S3 存储桶策略允许从 aws 机器学习进行读/写访问

Question

是否可以创建允许从 aws 机器学习进行读写访问的 S3 存储桶策略？我尝试了以下存储桶策略，但不起作用。

存储桶策略：

{
    "Version": "2008-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Principal": {
                "Service": "machinelearning.amazonaws.com"
            },
            "Action": [
                "s3:GetObject",
                "s3:PutObject"
            ],
            "Resource": "arn:aws:s3:::cxra/*"
        },
        {
            "Effect": "Allow",
            "Principal": {
                "Service": "machinelearning.amazonaws.com"
            },
            "Action": "s3:PutObjectAcl",
            "Resource": "arn:aws:s3:::cxra/*",
            "Condition": {
                "StringEquals": {
                    "s3:x-amz-acl": "bucket-owner-full-control"
                }
            }
        },
        {
            "Effect": "Allow",
            "Principal": {
                "Service": "machinelearning.amazonaws.com"
            },
            "Action": "s3:ListBucket",
            "Resource": "arn:aws:s3:::cxra"
        },
        {
            "Effect": "Allow",
            "Principal": {
                "Service": "machinelearning.amazonaws.com"
            },
            "Action": [
                "s3:GetBucketLocation"
            ],
            "Resource": "arn:aws:s3:::cxra"
        }
    ]
}

Error screen

Answer 1

根据 Granting Amazon ML Permissions to Output Predictions 到 Amazon S3 和 Granting Amazon ML Permissions to Read Your Data from Amazon S3 仔细检查您的政策

由于它们被记录为两个单独的政策，我建议您遵循这一点，而不是将这两个政策合并到一个文档中。故障排除会更容易。