Bucket policy support

Hello! Currently, the documentation states that we can use IAM policies for buckets ( Authentication & Authorization | Tigris Object Storage Documentation).

But when I try to do that it gives me the following error:

! error screenshot

How can I attach policies to buckets? Or create policies using the AWS CLI?

Authentication & Authorization | Tigris Object Storage Documentation

Tigris, being S3-compatible, offers S3-supported authentication and

Solution

Hi

The bug is fixed and deployed. You can use it as follows:

1. Create IAM policy

   aws iam --endpoint=https://fly.storage.tigris.dev:8009/ create-policy --policy-name=policy1 --policy-document file:///path/to/policy.json

2. Attach it to a user

   aws iam --endpoint=https://fly.storage.tigris.dev:8009/ attach-user-policy --policy-arn=<arn> --user-name=<access_key_id>

3. Verify attachment

   aws iam --endpoint=https://fly.storage.tigris.dev:8009/ list-user-policies --user-name=<access_key_id>

Hi

There are two things wrong here

1. The AWS command should look like this for IAM operations

aws iam --region=auto --endpoint=https://idev-tigris-os.fly.dev:8009/ create-policy --policy-name=policy1 --policy-document file:///Users/USER/projects/iam_test/policy1.json

Note:

• the IAM server is served at port 8009.
• policy creation is an IAM API.

2. There is a bug in the IAM implementation that fails to accept signed requests by access key. The bug will be fixed and an update will be provided here.

If you need high‑level read/write permissions, you can also use the dashboard in the meantime to adjust permissions.

fly storage dashboard

The bug is fixed and deployed. You can use it as follows:

1. Create IAM policy

   aws iam --endpoint=https://fly.storage.tigris.dev:8009/ create-policy --policy-name=policy1 --policy-document file:///path/to/policy.json

2. Attach it to a user

   aws iam --endpoint=https://fly.storage.tigris.dev:8009/ attach-user-policy --policy-arn=<arn> --user-name=<access_key_id>

3. Verify attachment

   aws iam --endpoint=https://fly.storage.tigris.dev:8009/ list-user-policies --user-name=<access_key_id>

Thank you! I’m using a Laravel project now and will configure tigris with this!

We are aiming to simplify the permission system and offer high‑level basic roles. I added more docs here: https://www.tigrisdata.com/docs/concepts/authnz/#authorization