Allow federated users to access AWS S3 bucket

Viewed 78

I have an app in play store that needs to download extra resources after installation. I thought that using Amazon s3 is a good idea to achieve it.(tell me if it is a bad idea)

Now, I would like to allow any logged in user through OpenID to access resources in the bucket.

Problem is; I can't allow federated users to access items in bucket. What ever i have tried so far is the following access policy;

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "ReadObjects",
            "Effect": "Allow",
            "Principal": {"Federated": "accounts.google.com"},
            "Action": "s3:GetObject",
            "Resource": "arn:aws:s3:::mysuperbbucket/*"
        }
    ]
}

but somehow AWS bucket policy editor raises an exception on it and saying that "Federated Principal Not Supported: The policy type does not support a federated provider in the principal element. Use a supported principal."

Alright, what to do now?

0 Answers
Related