我看到的唯一问题是，似乎没有任何方法可以在 AWS 控制台中访问这些共享存储桶。但许多第 3 方工具确实提供了此功能，您可以使用 API 访问它们。
It is possible to share buckets between existing AWS users without using IAM.
Using the console (or the API), add permissions on the bucket for each AWS User. In the Grantee field add the users email address or canonical userid (to get this, log into your AWS account, go to Account - Security Credentials, scroll to the bottom and click the link to reveal ID)
The only issue I see, is that there doesn't seem to be any way to access these shared buckets in the AWS Console. But many of the 3rd party tools do provide this facility and you can access them using the API.
First determine the Canonical User ID of the user you want to share a bucket with.
Both parties install s3cmd and set up credentials: s3cmd --configure
The bucket owner does this: s3cmd setacl --acl-grant=read:<canonical-user-id> s3://BUCKETNAME[/OBJECT]
The recipient can then see the bucket: s3cmd ls s3://BUCKETNAME[/OBJECT]
Note: In addition to read, write, read_acp, write_acp, full_control and all are possible, where write_acp means the user can change the access control permissions.
发布评论
评论（3）
可以在不使用 IAM 的情况下在现有 AWS 用户之间共享存储桶。
使用控制台（或 API），为每个 AWS 用户添加存储桶的权限。在“受让人”字段中添加用户电子邮件地址或规范用户 ID（要获取此信息，请登录您的 AWS 账户，转至账户 - 安全凭证，滚动到底部并单击链接以显示 ID）
我看到的唯一问题是，似乎没有任何方法可以在 AWS 控制台中访问这些共享存储桶。但许多第 3 方工具确实提供了此功能，您可以使用 API 访问它们。
It is possible to share buckets between existing AWS users without using IAM.
Using the console (or the API), add permissions on the bucket for each AWS User. In the Grantee field add the users email address or canonical userid (to get this, log into your AWS account, go to Account - Security Credentials, scroll to the bottom and click the link to reveal ID)
The only issue I see, is that there doesn't seem to be any way to access these shared buckets in the AWS Console. But many of the 3rd party tools do provide this facility and you can access them using the API.
您可以使用 s3cmd 来执行此操作。
s3cmd --configures3cmd setacl --acl-grant=read:s3://BUCKETNAME[/OBJECT] s3cmd ls s3://BUCKETNAME[/OBJECT]注意：除了 read、write、read_acp， write_acp、full_control 和 all 都是可能的，其中 write_acp 表示用户可以更改访问控制权限。
You can use s3cmd to do this.
s3cmd --configures3cmd setacl --acl-grant=read:<canonical-user-id> s3://BUCKETNAME[/OBJECT]s3cmd ls s3://BUCKETNAME[/OBJECT]Note: In addition to read, write, read_acp, write_acp, full_control and all are possible, where write_acp means the user can change the access control permissions.
查看 AWS 身份和访问管理 (IAM)。
Take a look at AWS Identity and Access Management (IAM).