When using the TIBCO ActiveMatrix BusinessWorks Plug-in for Amazon S3, it is necessary to configure the policies for the login user to give the user the right to operate the objects or buckets on the Amazon S3.

The user policies can be configured on the "IAM Management Console" of AWS.
When configuring the user policies, it is needed to specify the "Action" and the "Resources".

The "Action" is a list of the actions that can be done by the user. The meanings of the actions are very straightforward on the IAM.
The "Resources" is the bucket or object on which the actions can be operated. It is supported to set the "Resources" to all resources/buckets/objects or a specific bucket/object name. While setting the "Resources" to a specific bucket/object, it is important to figure out how will the action be operated on the bucket/object.

For instance, the Put activity of the TIBCO ActiveMatrix BusinessWorks Plug-in for Amazon S3 is used to upload Amazon S3 objects, copy objects between buckets, and create new buckets.

If the operation is to create a new bucket, the "Resources" can be set to all buckets (arn:aws:s3:::*) or a specific bucket name (arn:aws:s3:::<Buckek_Name>). Because the action is operated on the buckets.
If the operation is to upload Amazon S3 objects to buckets, the "Resources" has to be set to all objects (arn:aws:s3:::<Object_Name>/*) or a specific object name (arn:aws:s3:::<Bucket_Name>/<Object_Name>). Because the action is operated on the objects instead of the buckets.

Policy settings for TIBCO ActiveMatrix BusinessWorks Plug-in for Amazon S3

Product: TIBCO ActiveMatrix BusinessWorks Plug-in for Amazon S3 Version: All Supported Versions OS: All Supported Operating Systems