I have an app in play store that needs to download extra resources after installation. I thought that using Amazon s3 is a good idea to achieve it.(tell me if it is a bad idea)
Now, I would like to allow any logged in user through OpenID to access resources in the bucket.
Problem is; I can't allow federated users to access items in bucket. What ever i have tried so far is the following access policy;
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "ReadObjects",
"Effect": "Allow",
"Principal": {"Federated": "accounts.google.com"},
"Action": "s3:GetObject",
"Resource": "arn:aws:s3:::mysuperbbucket/*"
}
]
}
but somehow AWS bucket policy editor raises an exception on it and saying that "Federated Principal Not Supported: The policy type does not support a federated provider in the principal element. Use a supported principal."
Alright, what to do now?