AWS CodeBuild脚本无法与AccessDenied同步

我正在使用CodeBuild

  • 图片:aws / codebuild / nodejs:7.0.0
  • 服务angular色:代码buid-some-service-role

在我的buildspec中运行以下命令

aws s3 sync ./webroot s3://s3-us-west-2.amazonaws.com/some-amazing-s3-bucket/test 

这是桶政策:

 { "Version": "2012-10-17", "Id": "Policy1502332584348", "Statement": [ { "Sid": "Stmt1502332580996", "Effect": "Allow", "Principal": { "AWS": "arn:aws:iam::123456789:role/service-role/code-buid-some-service-role" }, "Action": "s3:*", "Resource": [ "arn:aws:s3:::some-amazing-s3-bucket/*", "arn:aws:s3:::some-amazing-s3-bucket" ] } ] } 

代码构build失败,与此:

 [Container] 2017/08/10 02:41:16 Running command aws s3 sync ./webroot s3://s3-us-west-2.amazonaws.com/some-amazing-s3-bucket/test fatal error: An error occurred (AccessDenied) when calling the ListObjects operation: Access Denied 

我错过了什么? 我在testing这个策略时打开了桶策略,但仍然失败。