Xtykutl

I am having some issues with Jenkings uploading to s3... basically we have two AWS environments, Live and Dev..

Jenkins is running on our Live environment, Has AWS access Keys, and Jenkins role from Live account..

Jenkings Role on Live has the policy as below:

{

"Version": "2012-10-17",

"Id": "Policy1541606229878898989",

"Statement": [

    {

        "Action": [

            "s3:ListAllMyBuckets"

        ],

        "Effect": "Allow",

        "Resource": "arn:aws:s3:::*"

    },

    {

        "Action": "s3:*",

        "Effect": "Allow",

        "Resource": [

            "arn:aws:s3:::beta.mydomain.co.uk",

            "arn:aws:s3:::beta.mydomain.co.uk/*"

        ]

    }

]

}

beta.mydomain.co.uk - is a bucket created on Dev environment..

and the bucket Policy is a s below:

{

"Version": "2012-10-17",

"Id": "Policy1541615390300",

"Statement": [

    {

        "Sid": "Stmt1541606105471",

        "Effect": "Allow",

        "Principal": "*",

        "Action": "s3:GetObject",

        "Resource": "arn:aws:s3:::beta.mydomain.co.uk/*"

    },

    {

        "Sid": "Stmt1541606206206",

        "Effect": "Allow",

        "Principal": {

            "AWS": "arn:aws:iam::123456789987:role/Jenkins"

        },

        "Action": "s3:*",

        "Resource": "arn:aws:s3:::beta.mydomain.co.uk/*"

    }

]

}

First part of this Policy is that, any contents which get uploaded to this bucket to be public with "Principal": "*", and actions: "Action": "s3:GetObject",

Second part of this bucket policy is that to allow jenkins role setup on our productions to have full access to dump the files

My problem is that Jenkings Dumps the files all fine, but For some reason those files are not PUBLIC.... when i try to make them public i get Access denined?

any ideas please? before my hair go more grey!

thanks