teratail header banner
teratail header banner
質問するログイン新規登録

回答編集履歴

2

add + mod

2018/05/10 02:38

投稿

lazhuward
lazhuward

スコア1294

answer CHANGED
@@ -42,7 +42,7 @@
42
42
  "Condition": {
43
43
  "StringLike": {
44
44
  "s3:prefix": [
45
- "cognito/[cognito app name]/[folder name]/"
45
+ "cognito/[cognito app name]/"
46
46
  ]
47
47
  }
48
48
  }
@@ -63,4 +63,25 @@
63
63
  }
64
64
  ]
65
65
  }
66
+ ```
67
+
68
+ ##追記2
69
+ Cognito IAMロールのデフォルトポリシー
70
+ ```
71
+ {
72
+ "Version": "2012-10-17",
73
+ "Statement": [
74
+ {
75
+ "Effect": "Allow",
76
+ "Action": [
77
+ "mobileanalytics:PutEvents",
78
+ "cognito-sync:*",
79
+ "cognito-identity:*"
80
+ ],
81
+ "Resource": [
82
+ "*"
83
+ ]
84
+ }
85
+ ]
86
+ }
66
87
  ```

1

add

2018/05/10 02:38

投稿

lazhuward
lazhuward

スコア1294

answer CHANGED
@@ -12,4 +12,55 @@
12
12
  ■FYI
13
13
  [Amazon Cognito » 開発者ガイド](https://docs.aws.amazon.com/ja_jp/cognito/latest/developerguide/setting-up-the-javascript-sdk.html)
14
14
  [cognitoを使ってログイン画面を作ってみた! 〜ログイン画面作成〜(作業メモ)](https://qiita.com/Yuki_BB3/items/ee8330830951acd907de)
15
- [Amazon Cognito UserPools を JavaScript から使ってみる](https://qiita.com/kusokamayarou/items/60bcf9d16ce0df93b0ea)
15
+ [Amazon Cognito UserPools を JavaScript から使ってみる](https://qiita.com/kusokamayarou/items/60bcf9d16ce0df93b0ea)
16
+
17
+ ##追記1
18
+ IAMポリシーを以下にしてみてください。
19
+ ```
20
+ {
21
+ "Version": "2012-10-17",
22
+ "Statement": [
23
+ {
24
+ "Sid": "AllowPublicCognitoIdentity",
25
+ "Effect": "Allow",
26
+ "Action": [
27
+ "cognito-identity:*",
28
+ "mobileanalytics:PutEvents",
29
+ "cognito-sync:*"
30
+ ],
31
+ "Resource": "*"
32
+ },
33
+ {
34
+ "Sid": "AllowPublicS3Bucket",
35
+ "Effect": "Allow",
36
+ "Action": [
37
+ "s3:ListBucket"
38
+ ],
39
+ "Resource": [
40
+ "arn:aws:s3:::[Bucket name]"
41
+ ],
42
+ "Condition": {
43
+ "StringLike": {
44
+ "s3:prefix": [
45
+ "cognito/[cognito app name]/[folder name]/"
46
+ ]
47
+ }
48
+ }
49
+ },
50
+ {
51
+ "Sid": "AllowPublicS3Object",
52
+ "Effect": "Allow",
53
+ "Action": [
54
+ "s3:GetObject",
55
+ "s3:PutObject",
56
+ "s3:DeleteObject",
57
+ "s3:PutObjectAcl"
58
+ ],
59
+ "Resource": [
60
+ "arn:aws:s3:::[Bucket name]/cognito/[cognito app name]/[folder name]/",
61
+ "arn:aws:s3:::[Bucket name]/cognito/[cognito app name]/[folder name]/*"
62
+ ]
63
+ }
64
+ ]
65
+ }
66
+ ```