Amazon S3 Upload ACL

@visualight change your bucket permission

@vipin93 I had already made this operation on the bucket but it does not work For my key and secret i generated a user on the IAM interface on amazon. In laravel i use these credential but all file uploaded with the permission is : (ME)

ME : List - Upload/Delete - View Permissions - Edit Permissions EVERYONE : View Permissions AUTH USER : Upload/Delete - View Permissions

@visualight add this line " 'visibility' => 'public' " in s3 config file

@vipin93 It change nothing i get always an error : AccessDenied after upload (when i try to view it by clicking on the link provided by amazon). If i manually set the permission on S3 panel (make public) it work.

Here is my config (filesystems.php)

's3' => [

'driver' => 's3',

'key' => '********',

'secret' => '*******',

'region' => 'eu-central-1',

'bucket' => '*******',

'visibility' => 'public'

],

@visualight ok try this 'ACL' => 'public-read', instead of 'visibility' => 'public'

@vipin93 Not working :-(

Ok, the only way i found is Granting Read-Only Permission to an Anonymous User. See : https://docs.aws.amazon.com/AmazonS3/latest/dev/example-bucket-policies.html

It looks like you already have an answer you like, but I had a similar problem, which I solved with an Amazon Identity and Access Management (IAM) policy. I thought you might also find it interesting.

My symptoms were:

• I could not set file-level Amazon S3 visibility when I uploaded a file (using the league/flysystem-aws-s3-v2 package).
• Using Flysystem with the Storage facade, the exists() method returned false, even though the files() method returned an array of file names.
• The get() method returned a file not found exception.

The fix was to create a new user group in Amazon IAM. I gave this new user group an inline access policy, granting group members full access to S3.

Here is what that policy looks like.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": "s3:*",
      "Resource": "*"
    }
  ]
}

The final step was to add my user to this group. Once the user had full access to S3, I was able to use Flysystem as expected.

Hello,

I tried this solution but it is assumed that when it comes to the date indicated in the file expires AWS S3 storage should not be disposed ?.

As follows :(.

Thanks in advance and greetings

It is possible

Here is a snippet of my code to handle avatars.

Storage::disk('s3')->put('/profile/avatar/' . $request->user()->id . ".png", file_get_contents($file));
Storage::disk('s3')->setVisibility('/profile/avatar/' . $request->user()->id . ".png", 'public');

Using laravel 5.3 as suggested in the documentation works perfectly.

Storage::putFile('path/to/image', $image, 'public');

Files are created in S3 with this permission:

Grantee: Everyone
Open/Download: TRUE 
View Permissions: FALSE
Edit permissions: FALSE

Late to the party about this but, picking up on @aroggio's point, just thought it worth sharing that if you want to use:

$path = Storage::putFile('avatars', $request->file('avatar'), 'public');

with aws s3, ie you are setting permissions on the file (public) as well as uploading them, your IAM user will need to have permission to do this (s3:PutObjectAcl) - e.g:

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": [
                "s3:ListBucket",
                "s3:ListAllMyBuckets",
                "s3:GetBucketLocation"
            ],
            "Resource": [
                "arn:aws:s3:::my-bucket"
            ]
        },
        {
            "Effect": "Allow",
            "Action": [
                "s3:PutObject",
                "s3:PutObjectAcl", 
                "s3:GetObject",
                "s3:DeleteObject"
            ],
            "Resource": [
                "arn:aws:s3:::my-bucket/*"
            ]
        }
    ]
}

@theotherdy you just saved me from 2 hours of writing bucket policies

@theotherdy is correct. I'd also add the s3:GetObjectAcl permission so the Storage::getVisibility($file) method works

As per the question, we can simply give permissions while uploading image, while we can do the same using bucket policy as well. Below code will make uploaded file as publicily readable.

$path = Storage::putFile('avatars', $request->file('avatar'), 'public');

That't it.

yes this work for me 'public' not 'public-read'