Required permissions are unclear.

[dsaita]

Hello. I can't find any documentation describing the required permissions that I have to grant on my bucket. Going "s3:*" is not the best choice overall.

[tommyb82]

Second this - I have been trying to expose an S3 maven bucket in read-only mode via an IAM account using ListBucket and GetObject as described on the readme page, but found it was not working and I kept hitting AccessDenied errors.
After debugging the plugin I realised it was failing on line 86 of SimpleStorageServiceWagon, when making a call to getBucketLocation. When I added the s3:GetBucketLocation permission to the statement in the user's policy, sure enough it started working.

[dweomer]

The minimal permissions that I needed to get this working were:

      "s3:Get*",
      "s3:List*",
      "s3:PutObject",
      "s3:PutObjectAcl",
      "s3:DeleteObject"

Which is effectively the default S3 read-only policy plus PutObject, PutObjectAcl, and DeleteObject