0

I am trying to do bucket listing on s3 bucket via cloudfront. Namely:

http://d1po79dcz1lvsl.cloudfront.net/?prefix=subdir&Signature=‘Signature_removed’&amp;Policy=‘policy_removed’&amp;Key-Pair-Id=‘id-removed’</p>

But CF has been given me Access denied all the time with different custom policies.

I tried policy that allow to access anything under distribution and I also tried with a policy that specify a url parameter. 

{
   "Statement": [
      {
         "Resource":"http*://d1po79dcz1lvsl.cloudfront.net/*",
         "Condition":{
            "DateLessThan":{"AWS:EpochTime":1462053600},
            "IpAddress":{"AWS:SourceIp":"185.46.212.0/24"}
         }
      }
   ]
}

{
   "Statement": [
      {
         "Resource":"http*://d1po79dcz1lvsl.cloudfront.net/?prefix=subdir",
         "Condition":{
            "DateLessThan":{"AWS:EpochTime":1462053600},
            "IpAddress":{"AWS:SourceIp":"185.46.212.0/24"}
         }
      }
   ]
}

None of them work. So could signed URL be used with bucket listing or just list index? If not, would it be possible with signed cookies? I do know bucket listing is possible with Cloudfront without signed URL.

4

0 回答 0