Flutter上传至S3桶的图片无法访问，请求技术解决方案

我尝试通过Flutter应用将图片上传至S3存储桶，已完成以下配置：

• 关闭存储桶公共访问阻止功能
• 为所有组设置列表和读取权限
• 配置桶策略：

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Principal": "*",
            "Action": "s3:*",
            "Resource": [
                "arn:aws:s3:::ARN",
                "arn:aws:s3:::ARN/*"
            ]
        }
    ]
}

• 配置CORS头：

[
    {
        "AllowedHeaders": [
            "*"
        ],
        "AllowedMethods": [
            "HEAD",
            "GET",
            "PUT",
            "POST",
            "DELETE"
        ],
        "AllowedOrigins": [
            "*"
        ],
        "ExposeHeaders": [
            "ETag"
        ]
    }
]

使用指定Flutter代码上传图片显示成功，但上传后的图片无法通过URL访问，查看对象权限时即使根用户账号也报错：

You don’t have permission to get object ACL
After you or your AWS administrator has updated your permissions to allow the s3:GetObjectAcl action, refresh the page. Learn more about Identity and access management in Amazon S3

直接上传至存储桶的图片无此异常，请问需要修改桶策略还是Flutter代码解决问题？

核心问题出在Flutter上传代码：

1. 使用MultipartRequest执行PUT上传，这是用于表单数据上传的格式，而S3直接接收文件的PUT请求不需要multipart格式，会导致存储的对象内容为表单数据而非原始文件，同时元数据和ACL设置异常。
2. 上传未指定x-amz-acl头，对象继承的ACL不符合访问要求，引发权限冲突。

无需修改桶策略和CORS配置，仅需调整Flutter上传代码，改用普通PUT请求直接上传文件内容，并添加权限头：

修改后的_uploadFile方法及辅助方法代码：

Future<void> _uploadFile() async {
  FilePickerResult? result = await FilePicker.platform.pickFiles();

  if (result != null) {
    setState(() {
      _file = File(result.files.single.path!);
      _fileName = result.files.single.name;
    });

    String baseUrl = "https://bucket.s3.us-east-1.amazonaws.com";
    String url;
    String encodedFileName = Uri.encodeComponent(_fileName!);

    if (_fileName!.endsWith('.jpg') || _fileName!.endsWith('.jpeg') || _fileName!.endsWith('.png')) {
      url = "$baseUrl/images/$encodedFileName";
    } else if (_fileName!.endsWith('.pdf') || _fileName!.endsWith('.doc') || _fileName!.endsWith('.docx')) {
      url = "$baseUrl/documents/$encodedFileName";
    } else {
      Get.snackbar(
        'Error',
        'Unsupported file type!',
        snackPosition: SnackPosition.BOTTOM,
      );
      return;
    }

    try {
      // 改用普通PUT请求，直接读取文件内容作为请求体
      final fileBytes = await _file!.readAsBytes();
      final request = http.Request('PUT', Uri.parse(url))
        ..bodyBytes = fileBytes
        ..headers['Content-Type'] = _getContentType(_fileName!)
        // 添加x-amz-acl头，设置对象为公共可读（可根据需求调整）
        ..headers['x-amz-acl'] = 'public-read';

      final response = await request.send();

      if (response.statusCode == 200) {
        print('File uploaded successfully to $url');
        Get.snackbar(
          'Success',
          'File uploaded successfully!',
          snackPosition: SnackPosition.BOTTOM,
        );
      } else {
        print('Upload failed with status: ${response.statusCode}');
        Get.snackbar(
          'Error',
          'Upload failed with status code: ${response.statusCode}',
          snackPosition: SnackPosition.BOTTOM,
        );
      }
    } catch (e) {
      print('An error occurred: $e');
      Get.snackbar(
        'Error',
        'An error occurred during upload!',
        snackPosition: SnackPosition.BOTTOM,
      );
    }
  } else {
    Get.snackbar(
      'Error',
      'No file selected',
      snackPosition: SnackPosition.BOTTOM,
    );
  }
}

// 提取Content-Type判断为单独方法，优化代码结构
String _getContentType(String fileName) {
  if (fileName.endsWith('.png')) {
    return 'image/png';
  } else if (fileName.endsWith('.jpg') || fileName.endsWith('.jpeg')) {
    return 'image/jpeg';
  } else if (fileName.endsWith('.pdf')) {
    return 'application/pdf';
  } else if (fileName.endsWith('.doc')) {
    return 'application/msword';
  } else if (fileName.endsWith('.docx')) {
    return 'application/vnd.openxmlformats-officedocument.wordprocessingml.document';
  } else {
    return 'application/octet-stream';
  }
}

• x-amz-acl可根据需求调整：
  • public-read：允许所有人读取对象
  • private：仅对象所有者和授权用户可访问（适合私有文件）
  • authenticated-read：仅AWS认证用户可读取

内容的提问来源于stack exchange，提问作者Nooh Ahamad