title: confusing s3 bucket policy upload issue
body: <p>I want my app to be able to put objects into an s3 bucket, and i want the public to be able to read the objects. For some reason uploads are not working unless I have block all public access turned off. Logs show this error: <code>Aws::S3::Errors::AccessDenied</code></p>
  <p>My Block public access settings look like so:
  <a href="https://i.stack.imgur.com/dGdX1.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/dGdX1.png" alt="enter image description here" /></a></p>
  <p>And my Bucket policy looks like so:</p>
  <pre><code>{
      &quot;Version&quot;: &quot;2012-10-17&quot;,
      &quot;Statement&quot;: [
          {
              &quot;Sid&quot;: &quot;GetPhoto&quot;,
              &quot;Effect&quot;: &quot;Allow&quot;,
              &quot;Principal&quot;: &quot;*&quot;,
              &quot;Action&quot;: &quot;s3:GetObject&quot;,
              &quot;Resource&quot;: &quot;arn:aws:s3:::site-public/photo/*&quot;
          }
      ]
  </code></pre>
  <p>The public access settings say they <em>do not</em> block bucket policies, but the functionality is still being blocked. Why?</p>