#!/bin/sh # Create buckets with versioning and object locking enabled.mc mb -l source/bucketmc mb -l dest/bucket #### Create a replication admin on source alias# create a replication admin user : repladminmc admin user add source repladmin repladmin123 # create a replication policy for repladmincat > repladmin-policy-source.json <<EOF{    "Version": "2012-10-17",    "Statement": [    {        "Action": [            "admin:SetBucketTarget",            "admin:GetBucketTarget"        ],        "Effect": "Allow",        "Sid": ""     },      {      "Effect": "Allow",      "Action": [       "s3:GetReplicationConfiguration",       "s3:PutReplicationConfiguration",       "s3:ListBucket",       "s3:ListBucketMultipartUploads",       "s3:GetBucketLocation",       "s3:GetBucketVersioning"      ],      "Resource": [       "arn:aws:s3:::bucket"      ]     }    ]   }EOFmc admin policy add source repladmin-policy ./repladmin-policy-source.jsoncat ./repladmin-policy-source.json #assign this replication policy to repladminmc admin policy set source repladmin-policy user=repladmin ### on dest alias# Create a replication user : repluser on dest aliasmc admin user add dest repluser repluser123 # create a replication policy for repluser# Remove "s3:GetBucketObjectLockConfiguration" if object locking is not enabled, i.e. bucket was not created with `mc mb --with-lock` option# Remove "s3:ReplicateDelete" if delete marker replication is not requiredcat > replpolicy.json <<EOF{ "Version": "2012-10-17", "Statement": [  {   "Effect": "Allow",   "Action": [    "s3:GetReplicationConfiguration",    "s3:ListBucket",    "s3:ListBucketMultipartUploads",    "s3:GetBucketLocation",    "s3:GetBucketVersioning",    "s3:GetBucketObjectLockConfiguration"   ],   "Resource": [    "arn:aws:s3:::bucket"   ]  },  {   "Effect": "Allow",   "Action": [    "s3:GetReplicationConfiguration",    "s3:ReplicateTags",    "s3:AbortMultipartUpload",    "s3:GetObject",    "s3:GetObjectVersion",    "s3:GetObjectVersionTagging",    "s3:PutObject",    "s3:DeleteObject",    "s3:ReplicateObject",    "s3:ReplicateDelete"   ],   "Resource": [    "arn:aws:s3:::bucket/*"   ]  } ]}EOFmc admin policy add dest replpolicy ./replpolicy.jsoncat ./replpolicy.json # assign this replication policy to replusermc admin policy set dest replpolicy user=repluser # define remote target for replication from source/bucket -> dest/bucketremote_arn=$(mc admin bucket remote add repladminAlias/bucket http://repluser:repluser123@localhost:9000/bucket --service replication --json | jq -r ".RemoteARN") echo "Now, use this ARN to add replication rules using 'mc replicate add' command"# use arn returned by above command to create a replication policy on the source/bucket with `mc replicate add`mc replicate add source/bucket --priority 1 --remote-bucket "${remote_arn}" \   --replicate existing-objects,delete,delete-marker,replica-metadata-sync