How to make S3 bucket with CMK public?

0

Team, I have a use case to make an S3 bucket public that is encrypted with Customer Managed Key. For private buckets, we grant the principals access to the Key in KMS service, but how do i grant access to KMS key for all the public users. I tried Principal * and it didn't work. Any suggestions?

1 回答
1

Accessing to objects encrypted with SSE-KMS requires IAM permission to decrypt. If you need to make the objects completely public, either don't use the default bucket encryption or use SSE-S3.

profile pictureAWS
专家
已回答 2 个月前
profile picture
专家
已审核 2 个月前
profile picture
专家
已审核 2 个月前
profile picture
专家
已审核 2 个月前
  • To be sure, you are saying if i have to make my objects public I can only use SSE-S3, right?

  • yes, if you want to make the objects publicly available to everyone without authentication.

您未登录。 登录 发布回答。

一个好的回答可以清楚地解答问题和提供建设性反馈,并能促进提问者的职业发展。

回答问题的准则