Can't list S3 buckets despite having FullAccess?

Serverless Framework
,
1

I’m creating a Lambda that iterates over all S3 buckets and has the line:
for bucket in s3.buckets.all():

When I try to test it I get:
“An error occurred (AccessDenied) when calling the ListBuckets operation: Access Denied”

I’m in a group that has the AmazonS3FullAccess policy:
“Statement”: [
{
“Effect”: “Allow”,
“Action”: “s3:",
“Resource”: "”
}
Why can I not even list the buckets?

Edit: after some Googling I created another policy with:
“Resource”: ["", "arn:aws:s3:::/*"]
and attached it to a group I’m in and I still get the same response. WTF Amazon?

2

You may have authority to call it, but does your Lambda?

Ensure that you grant permissions to the Lambda function by including it in your serverless.yml under provider.iamRoleStatements.
example:

provider:
  name: aws
  stage: dev
  iamRoleStatements:
    - Effect: Allow
      Action:
        - s3:ListBuckets
      Resource: 
        - arn:aws:s3:::*

Hope that helps.

3

This was to be used by AWS Config (RDK) service which I’m told creates the necessary policies so making the change you suggested shouldn’t be neceaary so I got around it like that.