How to download S3 file through Multi-Region Access Point (MRAP) using the AWS CLI?

Question

Hi,

I'd like to access a specific file which I know the key of through the AWS Cli.  
Before using MRAP, I simply had to do `aws s3 cp s3://my-bucket/my-path/file.png ./file.png` to download a specific file from within my private subnet (through a VPC Endpoint for S3).  
Now that I've setup MRAP, I'd like to know if there is an easy way to achieve the same goal using AWS CLI or if I need to implement my own CLI for this specific purpose.

Thanks in advance!

(I couldn't tag this question properly, there are no tag for awscli or mrap)

Answer

According to the [documentation](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/s3/index.html), the S3Uri does not support access point object ARNs.

```
The higher level s3 commands do not support access point object ARNs. For example, if the following was specified: s3://arn:aws:s3:us-west-2:123456789012:accesspoint/myaccesspoint/object/mykey the S3URI will resolve to the object key object/mykey
```
You can, however, use the s3api get-object using access points. See: [Using access points with compatible Amazon S3 operations](https://docs.aws.amazon.com/AmazonS3/latest/userguide/access-points-usage-examples.html) for examples.

See [Configuring a Multi-Region Access Point for use with AWS PrivateLink](https://docs.aws.amazon.com/AmazonS3/latest/userguide/MultiRegionAccessPointsPrivateLink.html) also for endpoint support.

How to download S3 file through Multi-Region Access Point (MRAP) using the AWS CLI?

Relevant content