Write/Read access to S3 bucket from EC2 machine

Creation of the S3 bucket

• Open the S3 buckets page:

• Create the S3 bucket:

• Block all public access to prevent public access:

Limit access to the S3 bucket (only an EC2 machine can access to it)

• Create a policy for the S3 bucket

• Specify permissions in the policy

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": [
                "s3:GetObject",
                "s3:PutObject",
                "s3:ListBucket"
            ],
            "Resource": [
                "arn:aws:s3:::your-bucket-name",
                "arn:aws:s3:::your-bucket-name/*"
            ]
        }
    ]
}

• Create a new role

• Select EC2 as the trusted entity

• Select the policy previously defined as permissions for the IAM role

Assign IAM role to EC2 machine