IAM permission issues

Use the following curated resources to troubleshoot common AWS Identity and Access Management (IAM) permission issues related to 403 Access Denied errors.

Troubleshoot 403 Access Denied errors from Amazon S3

How to troubleshoot and resolve the most common causes of 403 Access Denied errors in Amazon S3.

Resolve 403 errors when modifying an S3 bucket policy

How to resolve the "You don't have permissions to edit bucket policy" error when you modify an S3 bucket policy.

Troubleshoot IAM-related Access Denied errors in Amazon S3

If your IAM user adds objects to your S3 bucket and gets the HTTP 403: Access Denied error but they have the required permissions, then check the policies for settings that prevent downloads.

Cross-account access issues

Use the following curated resources to troubleshoot common cross-account access issues.

Troubleshoot cross-account access to a KMS-encrypted S3 bucket

How to grant cross-account access to an AWS KMS-encrypted S3 bucket for cross-account users that get a 403 error.

Provide cross-account access to objects in Amazon S3 buckets

How to grant another AWS account access to an object that is stored in an Amazon Simple Storage Service (Amazon S3) bucket.

Amazon S3 with other services

Use the following curated resources to troubleshoot common 403 Access denied errors that you can get when you use Amazon S3 with other AWS services.

Resolve Access Denied errors from a CloudFront distribution using an Amazon S3 website endpoint

How to determine if your distribution's origin domain name is an S3 website endpoint or an S3 REST API endpoint, and then how to troubleshoot accordingly.

Resolve HTTP 403 "Access Denied" AmazonS3Exception in Amazon EMR

How to check the credentials or role in your application code submitted to an Amazon EMR cluster and confirm that the policies allow the required Amazon S3 operations to resolve the error.

Regain access to your Amazon S3 bucket

I accidentally denied everyone access to my Amazon S3 bucket. How do I regain access?

Video - Regain access to an Amazon S3 bucket

Watch this video to learn how to regain access to an Amazon S3 bucket that has an incorrectly configured bucket policy that denies access to all users.

Article - Regain access to an Amazon S3 bucket

How to regain access to an Amazon S3 bucket that has an incorrectly configured bucket policy that denies access to all users.

Errors for Amazon S3 REST API

API Reference information about Amazon S3 errors

Error responses

Amazon S3 HTTP status codes, error codes, and their descriptions.

Related questions

See the following questions and answers related to common 403 errors.

S3 403 Access Denied error

Answer to a common customer question about HTTP 403 Forbidden errors when using a Lambda authorizer with an API Gateway REST API.

S3 return 403 error when generating Whatsapp Image Preview Links

Answer to a common customer question about 403 errors with S3 objects and the permissions needed to allow access to a third-party such as WhatsApp.

403 Access denied error from S3 in Glue

Answer to a common customer question about the IAM configuration for AWS Glue to access the S3 bucket and run jobs.

CloudFront 403 when loading image/scripts

Answer to a common customer question about HTTP 403 errors from Amazon CloudFront.

Amazon S3 bucket permissions - Access Denied

If you're getting a 403 error when you try to download existing objects in an S3 bucket, then see this answer on the Stack Overflow website.