4 ms·
How did you do "no overwrite" bit? By enabling versioning?
by oavdeev 8y ago
How did you do "no overwrite" bit? By enabling versioning?
- laurencei 8y agoI use `s3:PutObject` with versioning - yes. Although I've not tested if only having `s3:PutObject` even allows overwriting in the first place? You might not need versioning. Also - they dont have `list` or `read` access, so they cant even see what files are there to overwrite in the first place. They might be able to guess depending on your code, but adding some random numbers and you'd be pretty safe. Any AWS IWS experts able to confirm if `s3:PutObject` allows overwrite?
- oavdeev 8y agoIt does; unfortunately they don't have a nice way to just disallow overwrites (that's why I was curious how you implemented that)