amazon-web-services - AWS Elastic Beanstalk 更新环境错误

Question

我遇到了奇怪的错误。
命令:

aws elasticbeanstalk update-environment --environment-name my-env --version-label c4fc4991b8838933de0f498e2e0060b522078092

调用UpdateEnvironment操作时出现客户端错误(InvalidParameterValue):请求对象时必须指定bucket名称参数
另外我在 this site 上找不到任何与存储桶相关的配置.
这是我的政策

    {
  "Effect": "Allow",
  "Action": [
    "s3:ListBucket",
    "s3:GetObject",
    "s3:PutObject",
    "s3:DeleteObject",
    "s3:PutObjectAcl",
    "s3:GetObjectAcl",
    "s3:GetBucketPolicy"
  ],
  "Resource": [
    "arn:aws:s3:::elasticbeanstalk*"
  ]
},
{
  "Effect": "Allow",
  "Action": [
    "autoscaling:DescribeAutoScalingGroups",
    "autoscaling:DescribeScalingActivities",
    "autoscaling:ResumeProcesses",
    "autoscaling:SuspendProcesses",
    "cloudformation:DescribeStackEvents",
    "cloudformation:DescribeStackResource",
    "cloudformation:DescribeStacks",
    "cloudformation:GetTemplate",
    "cloudformation:UpdateStack",
    "ec2:DescribeImages",
    "ec2:DescribeKeyPairs",
    "ec2:DescribeSecurityGroups",
    "elasticbeanstalk:CreateApplicationVersion",
    "elasticbeanstalk:DescribeConfigurationOptions",
    "elasticbeanstalk:DescribeConfigurationSettings",
    "elasticbeanstalk:DescribeEnvironmentResources",
    "elasticbeanstalk:DescribeEnvironments",
    "elasticbeanstalk:DescribeEvents",
    "elasticbeanstalk:RequestEnvironmentInfo",
    "elasticbeanstalk:RetrieveEnvironmentInfo",
    "elasticbeanstalk:UpdateEnvironment",
    "elasticbeanstalk:ValidateConfigurationSettings",
    "elasticloadbalancing:DescribeInstanceHealth",
    "elasticloadbalancing:DescribeLoadBalancers",
    "elasticloadbalancing:RegisterInstancesWithLoadBalancer",
    "rds:DescribeOrderableDBInstanceOptions",
    "rds:DescribeDBInstances",
    "sns:CreateTopic",
    "sns:GetTopicAttributes",
    "sns:ListSubscriptionsByTopic"
  ],
  "Resource": "*"
}

Answer 1

我已经与来自 AWS 的客户支持人员进行了交谈，他确认这是一个政策问题。所以我改变了我的第一个陈述如下。我添加了值 "s3:Get*" Action 数组的结尾。

        {
        "Effect": "Allow",
        "Action": [
            "s3:ListBucket",
            "s3:GetObject",
            "s3:PutObject",
            "s3:DeleteObject",
            "s3:PutObjectAcl",
            "s3:GetObjectAcl",
            "s3:GetBucketPolicy",
            "s3:Get*"
        ],
        "Resource": [
            "arn:aws:s3:::elasticbeanstalk*"
        ]
    },