Uploaded image for project: 'IGB'
  1. IGB
  2. IGBF-1990

Fix S3 permissions issue

        Details

        • Type: Bug
        • Status: Closed (View Workflow)
        • Priority: Blocker
        • Resolution: Unresolved
        • Affects Version/s: None
        • Fix Version/s: None
        • Labels:
          None

          Description

          When users upload files, IGB AppStore stores them in an S3 bucket. However, when client software - including both IGB and the user's Web browser - tries to retrieve those files, access is denied.

          IGB AppStore should ensure that all files uploaded by users are accessible.

            Attachments

              Issue Links

              relates to

              Improvement - An improvement or enhancement to an existing feature or task. IGBF-1991 Simplify jar file name

              • Critical - Crashes, loss of data, severe memory leak.
              • Closed

                Activity

                Ascending order - Click to sort in descending order
                Hide
                Permalink
                ann.loraine Ann Loraine added a comment -

                https://testdriven.io/blog/storing-django-static-and-media-files-on-amazon-s3/
                https://django-storages.readthedocs.io/en/latest/backends/amazon-S3.html

                Show
                ann.loraine Ann Loraine added a comment - https://testdriven.io/blog/storing-django-static-and-media-files-on-amazon-s3/ https://django-storages.readthedocs.io/en/latest/backends/amazon-S3.html
                Hide
                Permalink
                ann.loraine Ann Loraine added a comment -

                testdriven.io links/advice appears out of date
                Solution appears to be:
                1) turn off block public access
                2) add bucket permission:

                {
                "Version": "2012-10-17",
                "Statement": [

                { "Sid": "PublicReadGetObject", "Effect": "Allow", "Principal": "*", "Action": [ "s3:GetObject" ], "Resource": [ "arn:aws:s3:::devappstoreN-media-0000/*" ] }

                ]
                }

                Documented same in test appstore setup.

                Show
                ann.loraine Ann Loraine added a comment - testdriven.io links/advice appears out of date Solution appears to be: 1) turn off block public access 2) add bucket permission: { "Version": "2012-10-17", "Statement": [ { "Sid": "PublicReadGetObject", "Effect": "Allow", "Principal": "*", "Action": [ "s3:GetObject" ], "Resource": [ "arn:aws:s3:::devappstoreN-media-0000/*" ] } ] } Documented same in test appstore setup.
                Hide
                Permalink
                ann.loraine Ann Loraine added a comment - - edited

                Configured devappstore S3 buckets 1 through 6 as in previous comment. Tested with DevAppStore5.
                To test:

                1) Start up your DevAppStore EC2.
                2) Check that images are being rendered properly in your browser.
                3) Check that you can download an IGB App jar file from the same URL IGB uses.

                To determine the URL that IGB uses, check the URI tag generated by the OBR index file endpoint. Pre-pend the EC2 domain in front of it and try to hit that endpoint.

                Show
                ann.loraine Ann Loraine added a comment - - edited Configured devappstore S3 buckets 1 through 6 as in previous comment. Tested with DevAppStore5. To test: 1) Start up your DevAppStore EC2. 2) Check that images are being rendered properly in your browser. 3) Check that you can download an IGB App jar file from the same URL IGB uses. To determine the URL that IGB uses, check the URI tag generated by the OBR index file endpoint. Pre-pend the EC2 domain in front of it and try to hit that endpoint.
                Hide
                Permalink
                ann.loraine Ann Loraine added a comment -

                Sameer Shanbhag and I have both tested the new configuration - it is working as expected. Moving this forward to Closed.

                Show
                ann.loraine Ann Loraine added a comment - Sameer Shanbhag and I have both tested the new configuration - it is working as expected. Moving this forward to Closed.

                  People

                  • Assignee:
                    ann.loraine Ann Loraine
                    Reporter:
                    ann.loraine Ann Loraine
                  • Votes:
                    0 Vote for this issue
                    Watchers:
                    1 Start watching this issue

                    Dates

                    • Created:
                      Updated: