[doc] correct S3 policy for multiparts

for multipart to work correctly you need to also include the necessary actions in the policy. ```json { "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": [ "s3:ListBucket", "s3:GetBucketLocation", "s3:ListBucketMultipartUploads", "s3:ListBucketVersions" ], "Resource": [ "arn:aws:s3:::yourbucket" ] }, { "Effect": "Allow", "Action": [ "s3:PutObject", "s3:GetObject", "s3:DeleteObject", "s3:PutObjectAcl", "s3:AbortMultipartUpload", "s3:ListMultipartUploadParts" ], "Resource": [ "arn:aws:s3:::yourbucket/*" ] } ] } ``` Closes elastic#214 (cherry picked from commit 62966ad) (cherry picked from commit 25a37a5)

Author: dadoonet

README.md

@@ -186,7 +186,10 @@ In order to restrict the Elasticsearch snapshot process to the minimum required
  "Statement": [
  {
  "Action": [
- "s3:ListBucket"
+ "s3:ListBucket",
+ "s3:GetBucketLocation",
+ "s3:ListBucketMultipartUploads",
+ "s3:ListBucketVersions"
  ],
  "Effect": "Allow",
  "Resource": [
@@ -197,7 +200,9 @@ In order to restrict the Elasticsearch snapshot process to the minimum required
  "Action": [
  "s3:GetObject",
  "s3:PutObject",
- "s3:DeleteObject"
+ "s3:DeleteObject",
+ "s3:AbortMultipartUpload",
+ "s3:ListMultipartUploadParts"
  ],
  "Effect": "Allow",
  "Resource": [
@@ -207,7 +212,6 @@ In order to restrict the Elasticsearch snapshot process to the minimum required
  ],
  "Version": "2012-10-17"
 }
-
 ```
 
 You may further restrict the permissions by specifying a prefix within the bucket, in this example, named "foo".
@@ -217,7 +221,10 @@ You may further restrict the permissions by specifying a prefix within the bucke
  "Statement": [
  {
  "Action": [
- "s3:ListBucket"
+ "s3:ListBucket",
+ "s3:GetBucketLocation",
+ "s3:ListBucketMultipartUploads",
+ "s3:ListBucketVersions"
  ],
  "Condition": {
  "StringLike": {
@@ -235,7 +242,9 @@ You may further restrict the permissions by specifying a prefix within the bucke
  "Action": [
  "s3:GetObject",
  "s3:PutObject",
- "s3:DeleteObject"
+ "s3:DeleteObject",
+ "s3:AbortMultipartUpload",
+ "s3:ListMultipartUploadParts"
  ],
  "Effect": "Allow",
  "Resource": [
@@ -245,7 +254,6 @@ You may further restrict the permissions by specifying a prefix within the bucke
  ],
  "Version": "2012-10-17"
 }
-
 ```
 
 The bucket needs to exist to register a repository for snapshots. If you did not create the bucket then the repository registration will fail. If you want elasticsearch to create the bucket instead, you can add the permission to create a specific bucket like this: