相关疑难解决方法(0)

我有一个桶,我意外地将数千个带ACL的文件上传到:public_read我希望所有文件都不可用,除了生成的访问URL.

我试图创建一个存储桶策略,拒绝所有人,并允许所有人.

它不起作用,即使使用生成的访问URL,也禁止所有文件:

http://s3.amazonaws.com/myBucket/myFile.pdf?AWSAccessKeyId=AKIAIZB2XTOJ6KYB5SCA&Expires=1331137308&Signature=zRfPOj4XFBrXhyqDZ5DpwJqsWs0%3D

{
    "Version": "2008-10-17",
    "Id": "Policy1331136935471",
    "Statement": [
        {
            "Sid": "Stmt1331136294179",
            "Effect": "Deny",
            "Principal": {
                "AWS": "*"
            },
            "Action": "s3:GetObject",
            "Resource": "arn:aws:s3:::myBucket/*"
        },
        {
            "Sid": "Stmt1331136364169",
            "Effect": "Allow",
            "Principal": {
                "AWS": "arn:aws:iam::6527...3775:root"
            },
            "Action": "s3:*",
            "Resource": "arn:aws:s3:::myBucket/*"
        }
    ]
}

更新:
我在文档中找到了对默认拒绝的引用,但AWS Policy Generator只有2个值"允许"和"拒绝"是否有人具有默认拒绝的语法？

谢谢你的帮助