Amplify-cli: Granting access to objects in S3 bucket for authenticated users

[timkuilman]

* Which Category is your question related to? *
Accessing files in an S3 bucket

* What AWS Services are you utilizing? *
AWS Amplify with Auth added

* Provide additional details e.g. code snippets *
Hi!

I'm currently working on a React Native app that I am buildign with Amplify. I did add Auth and a GraphQL to the app and implemented both.

I am currently trying to load some images in my app that are hosted in an S3 bucket. These images are uploaded without public access since I only want to use them in the app. My guess was that I would have to add a new policy to the authenticated Auth role that can be found in amplify/.config/team-provider-info.json under AuthRoleArn.

So I did add the following policy to that role:

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "VisualEditor0",
            "Effect": "Allow",
            "Action": [
                "s3:GetObjectAcl",
                "s3:GetObject"
            ],
            "Resource": "arn:aws:s3:::BUCKETNAME/*"
        }
    ]
}

Unfortunately the images are not showing up in my app. Am I missing something?

Thank you in advance!

[elorzafe]

@timkuilman I would add Storage to the project with amplify storage add and use that bucket in your app. You will have different access level according to your needs working out of the box. Take a look here for more information.

[timkuilman]

I will try that approach thank you.

Still I am wondering why my approach did not work. I will probably have a look at the what Storage does exactly. My current project only needs to read from an S3 bucket and setting up Storage seems a bit like an overkill.

[yuth]

Still I am wondering why my approach did not work. I will probably have a look at the what Storage does exactly. My current project only needs to read from an S3 bucket and setting up Storage seems a bit like an overkill.

The file amplify/.config/team-provider-info.json is auto generated is used only for reference. Adding policy to this file won't update the stack/policy

[stephendmalloy]

@yuth if he did want to add access to the bucket manually, then how would he go about doing so with Amplify?