Skip to content
By using AWS re:Post, you agree to the AWS re:Post Terms of Use
AWS re:Postre:Post
About re:Post

S3 Buckets out of control

0

Hello, I am stuck with buckets in a weird state, here are all my attempts:

Deleting

I have a set of old buckets in a really weird state, I am connected with the root user of my account and I want to delete them but impossible.

s3 console with stuck buckets

Properties

I can't even get the list of properties or permissions about these buckets, I get errors about IAM permissions that I am missing but since I am connected with the root user in theory I have all the permissions necessary ? (I even tried with and IAM user with the specific permissions but nothing)

Enter image description here

CLI

With the CLI nothing more, I get these messages:

$ aws s3api list-object-versions --bucket "sagemaker-studio-0000000"
An error occurred (AccessDenied) when calling the ListObjectVersions operation: Access Denied
$ aws s3 rm s3://sagemaker-studio-0000000 --recursive      
fatal error: An error occurred (AccessDenied) when calling the ListObjectsV2 operation: Access Denied

I'm out of ideas and don't know what to do to delete theses buckets. Do you have any ideas ?

Thank you

Topics
StorageSecurity, Identity, & Compliance
Tags
AWS Identity and Access ManagementS3 SelectAmazon Simple Storage Service
Language
English

asked 3 years ago571 views

2 Answers
1

You should be able to regain access to your buckets this way - https://repost.aws/knowledge-center/s3-accidentally-denied-access

EXPERT

answered 3 years ago

  • rePost-User-6094019
    3 years ago

    Thanks for your reply !

    I was able to delete the bucket that was in error state with the help of the link you provided

    But sadly, as you can see in my previous screenshot, the 3 last buckets that are in insufficient permissions state don't even allow me to see the policies or even the owner of the bucket (I am logged in as the root user) :/

    Enter image description here

0

This could be caused by an Organization Service Control Policy (SCP), that can deny operations/resources to the root user account. You can try the policy simulator to see if that is what is happening.

AWS
EXPERT

answered 3 years ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Relevant content