title: How to enable read write amazon s3 bucket permission
body: <p>I want to connect my <a href="https://github.com/cobyism/ghost-on-heroku" rel="nofollow noreferrer">ghost blog</a> made with heroku to my s3 bucket in aws to be able to upload images in posts. </p>
  
  <p>I have my user ARN: arn:aws:iam::916616152568:user/<em>myuser</em> attached to a group with "AmazonS3FullAccess". </p>
  
  <p>What am I doing wrong?</p>
  
  <p>Public access settings for this bucket:  </p>
  
  <pre><code>Manage public access control lists (ACLs)
  Block new public ACLs and uploading public objects (Recommended)
  True
  
  Remove public access granted through public ACLs (Recommended)
  True
  Manage public bucket policies
  
  Block new public bucket policies (Recommended)
  False
  
  Block public and cross-account access if bucket has public policies 
  (Recommended)
  False
  </code></pre>
  
  <p>And my bucket policy: </p>
  
  <pre><code>{
  "Version": "2012-10-17",
  "Statement": [
      {
          "Sid": "ListObjectsInBucket",
          "Effect": "Allow",
          "Principal": {
              "AWS": "arn:aws:iam::916616152568:user/*myuser*"
          },
          "Action": "s3:ListBucket",
          "Resource": "arn:aws:s3:::*myS3bucket*"
      },
      {
          "Sid": "AllObjectActions",
          "Effect": "Allow",
          "Principal": {
              "AWS": "arn:aws:iam::916616152568:user/*myuser*"
          },
          "Action": "s3:*Object",
          "Resource": "arn:aws:s3:::*myS3bucket*/*"
      }
  ]
  }
  </code></pre>
  
  <p>I have already uploaded the <code>S3_ACCESS_BUCKET_NAME</code> , <code>S3_ACCESS_BUCKET_REGION</code>, <code>S3_ACCESS_KEY_ID</code> and <code>S3_ACCESS_SECRET_KEY</code> to my heroku environment variables</p>
  
  <p>I'm having this error uploading the files from my ghost server. <code>Failed to load resource: the server responded with a status of 403 (Forbidden)</code> But no problem if I login and upload from the aws console. </p>