Why am I seeing "Error" in the Access field for some buckets in the Amazon S3 console?

2 minute read
0

I see "Error" in the Access field for certain buckets in the Amazon Simple Storage Service (Amazon S3) console.

Resolution

The bucket list view in the Amazon S3 console includes an Access column that provides information about public access to each bucket. To see the Access value, the AWS Identity and Access Management (IAM) identity (user or role) must have the correct permissions.

The IAM user or role that uses the console must have the following permissions to each bucket:

s3:GetAccountPublicAccessBlock
s3:GetBucketPublicAccessBlock
s3:GetBucketPolicyStatus
s3:GetBucketLocation
s3:GetBucketAcl
s3:ListAccessPoints
s3:ListAllMyBuckets

If the IAM identity doesn't have the required permissions, then the identity sees "Error" in the Access field. This is also true if the identity is explicitly denied access to the required permissions.

To allow an IAM identity to see Access values in the Amazon S3 console, add the required permissions to the policy for the user or role.

Note: Because of eventual consistency, a bucket that you recently deleted might appear in the console with "Error" in the Access field. To confirm that a bucket is deleted, check the AWS CloudTrail event history for DeleteBucket events.

Related information

Configuring block public access settings for your S3 buckets

AWS OFFICIAL
AWS OFFICIALUpdated 10 months ago
2 Comments

The permissions section is missing the "s3:" prefix for "GetAccountPublicAccessBlock" action

scox
replied 6 months ago

Thank you for your comment. We'll review and update the Knowledge Center article as needed.

profile pictureAWS
MODERATOR
replied 6 months ago