Getting access denied when following the documentation on how to copy objects between Lightsail buckets

0

I want to copy a few objects from one Lightsail bucket to another.

Following the documentation here: https://lightsail.aws.amazon.com/ls/docs/en_us/articles/amazon-lightsail-copying-moving-bucket-objects, I added an Admin user (with the directly attached "AdministratorAccess" policy) and set up aws cli. Listing my buckets and the objects in them works fine. However, if I try to copy an object as specified in the docs:

aws s3api copy-object --copy-source DOC-EXAMPLE-BUCKET/images/sailbot.jpg --key media/sailbot.jpg --bucket DOC-EXAMPLE-BUCKET

I get an access denied error:

An error occurred (AccessDenied) when calling the CopyObject operation: Access Denied
2 Respostas
1
Resposta aceita

Hello. Thanks for reporting this issue. To get the the copy object command to work properly you must include --acl bucket-owner-full-control in your command. I will work with our team to correct our documentation.

aws s3api copy-object --copy-source DOC-EXAMPLE-BUCKET/images/sailbot.jpg --key media/sailbot.jpg --bucket DOC-EXAMPLE-BUCKET --acl bucket-owner-full-control
AWS
respondido há 2 anos
0

Hi! are you substituting your own bucket name for "DOC-EXAMPLE-BUCKET"? The bucket you're using should be owned and setup by you as well: https://lightsail.aws.amazon.com/ls/docs/en_us/articles/buckets-in-amazon-lightsail

If you are, I would check the bucket permissions and security configuration as well: https://lightsail.aws.amazon.com/ls/docs/en_us/articles/amazon-lightsail-understanding-bucket-permissions

jsonc
respondido há 2 anos
  • are you substituting your own bucket name for "DOC-EXAMPLE-BUCKET"

    Yes, like mentioned, read access works fine (I can e.g. list and download objects).

    The bucket you're using should be owned and setup by you as well

    I used the root account to set up my buckets. I also created another account with admin permissions, as described here: https://lightsail.aws.amazon.com/ls/docs/en_us/articles/lightsail-how-to-set-up-access-keys-to-use-sdk-api-cli. Tried with an access key for both root and the admin, and neither can upload objects.

    If you are, I would check the bucket permissions and security configuration as well

    I have individual access keys for each the buckets, but afaict there's no way to use two access keys in one cli command.

Você não está conectado. Fazer login para postar uma resposta.

Uma boa resposta responde claramente à pergunta, dá feedback construtivo e incentiva o crescimento profissional de quem perguntou.

Diretrizes para responder a perguntas