Read permission error?

Question

I uploaded my-file.mp3 to my-bucket using awscli (and re-downloaded it to verify I have read access on the bucket and the file). But when I try to start the following job from the CLI:

```
$ cat amazon-test.json
{
    "TranscriptionJobName": "transcription-test",
    "LanguageCode": "en-US",
    "MediaFormat": "mp3",
    "Media": {
        "MediaFileUri": "https://s3.us-east-1.amazonaws.com/my-bucket/my-file.mp3"
    }
}
```

I get an access error:

```
aws transcribe start-transcription-job --region us-east-1 --cli-input-json file://amazon-test.json

An error occurred (BadRequestException) when calling the StartTranscriptionJob operation: The S3 URI that you provided can't be accessed. Make sure that you have read permission and try your request again.
```

Am I missing something obvious here? The documentation seems to indicate that don't need to grant any access to the Amazon Transcribe service unless I want to output to my own bucket. When I add a typo to my-bucket in the MediaFileUri property above, the error changes to, "The URI that you provided doesn't point to an S3 object." So I do think the syntax is correct and I'm pointing it to my bucket correctly.

Answer

Resolved my issue. Had to add "transcribe.amazonaws.com" as a Trusted Entity (under "Trust relationships" tab in console Roles editor)

Answer

Hello, do you have JobExecutionSettings set (queue)? This requires you to add another role that allows read and write access from input folder and output bucket. It may also require you to pass your role as well.

Answer

Hi jamalbernhard,   
  
Make sure that you don't have policies on your source S3 bucket that would prevent other services like Amazon Transcribe from accessing it. Your testing that you can download your own file in your own S3 bucket only ensures that you have access. It doesn't confirm that other services can access.

Answer

I'm experiencing the same issue (using the JobExecutionSettings deferred execution). I even tested after attaching the "AdministratorAccess" policy to both my API user (which performs the StartTranscriptionJob request), as well as the DataAccessRoleArn role, and still get the same error:  
(The S3 URI that you provided can't be accessed. Make sure that you have read permission and try your request again.)  
  
Works fine if I do not provide any JobExecutionSettings

Answer

I'm getting the same error  
  
BadRequestException: The S3 URI that you provided can't be accessed. Make sure that you have read permission and try your request again  
  
I set the bucket policy to allow public read, but still no luck  
  
Have you been able to solve this?

Read permission error?

関連するコンテンツ