Getting access denied when following the documentation on how to copy objects between Lightsail buckets

0

I want to copy a few objects from one Lightsail bucket to another.

Following the documentation here: https://lightsail.aws.amazon.com/ls/docs/en_us/articles/amazon-lightsail-copying-moving-bucket-objects, I added an Admin user (with the directly attached "AdministratorAccess" policy) and set up aws cli. Listing my buckets and the objects in them works fine. However, if I try to copy an object as specified in the docs:

aws s3api copy-object --copy-source DOC-EXAMPLE-BUCKET/images/sailbot.jpg --key media/sailbot.jpg --bucket DOC-EXAMPLE-BUCKET

I get an access denied error:

An error occurred (AccessDenied) when calling the CopyObject operation: Access Denied
2 Respuestas
1
Respuesta aceptada

Hello. Thanks for reporting this issue. To get the the copy object command to work properly you must include --acl bucket-owner-full-control in your command. I will work with our team to correct our documentation.

aws s3api copy-object --copy-source DOC-EXAMPLE-BUCKET/images/sailbot.jpg --key media/sailbot.jpg --bucket DOC-EXAMPLE-BUCKET --acl bucket-owner-full-control
AWS
respondido hace 2 años
0

Hi! are you substituting your own bucket name for "DOC-EXAMPLE-BUCKET"? The bucket you're using should be owned and setup by you as well: https://lightsail.aws.amazon.com/ls/docs/en_us/articles/buckets-in-amazon-lightsail

If you are, I would check the bucket permissions and security configuration as well: https://lightsail.aws.amazon.com/ls/docs/en_us/articles/amazon-lightsail-understanding-bucket-permissions

jsonc
respondido hace 2 años
  • are you substituting your own bucket name for "DOC-EXAMPLE-BUCKET"

    Yes, like mentioned, read access works fine (I can e.g. list and download objects).

    The bucket you're using should be owned and setup by you as well

    I used the root account to set up my buckets. I also created another account with admin permissions, as described here: https://lightsail.aws.amazon.com/ls/docs/en_us/articles/lightsail-how-to-set-up-access-keys-to-use-sdk-api-cli. Tried with an access key for both root and the admin, and neither can upload objects.

    If you are, I would check the bucket permissions and security configuration as well

    I have individual access keys for each the buckets, but afaict there's no way to use two access keys in one cli command.

No has iniciado sesión. Iniciar sesión para publicar una respuesta.

Una buena respuesta responde claramente a la pregunta, proporciona comentarios constructivos y fomenta el crecimiento profesional en la persona que hace la pregunta.

Pautas para responder preguntas