S3 output requires PutObject on * Resources

[mujtabahussain]

@Theodore_Cowan

That's the exact problem. Specifying a bucket ARN in Resources does not work. I tested the IAM policy limiting access to the specific bucket using the AWS CLI, and it worked as expected. However, it did not work with logstash.

My bad. I should read more carefully

In addition, I was only able to make this work with a bucket in the us-east-1 region (???).

That seems very strange.

I challenge you! Setup Logstash s3 output with logstash-5.4.3-1 to a bucket in us-west-2 region with a IAM user that is appropriately scoped to a single bucket. It will not work. And if it does work, I beg you to show me your configuration.

haha ...I shall definitely try