AWS S3 bucket access token

Question

I have an aws s3 bucket and want to share and sync data with my team and some other individuals (and later access this data in the cloud). This is easy with the aws cli (aws s3 sync ...), but since we are now in the situation where multiple other individuals from outside are involved, they don't have an aws-account.

What is the preferred strategy here? Is there a way to get something like a read/write access-token, which then could get passed to the aws-cli?

Answer 1

You probably want to setup IAM users and give the access either though a bucket policy or on the user level.

With bucket policies you can easily define what paths users are able to edit and access.

When you create an IAM user you also have the option of creating one for Programmatic(CLI) access only which will give you a set of credentials for that user only. Just use aws configure and set the access and token key.

You also probably want to make sure you are using an IAM user yourself as it's generally recommended for security.