1 Answer
- Newest
- Most votes
- Most comments
0
When you say you're using the object URL as reported by the console, you mean a URL starting with "https://AccessPointName-AccountId.s3-accesspoint.region.amazonaws.com"?
As in https://docs.aws.amazon.com/AmazonS3/latest/userguide/access-points-restrictions-limitations.html, access points don't support anonymous access and you must use AWS Signature Version 4 when making requests to an access point by using the REST APIs.
I'm not sure what you mean by "open read policy" but if you're trying to allow anonymous public access it won't work.
Relevant content
- Accepted Answerasked a year ago
- asked a year ago
AWS OFFICIALUpdated 3 years ago- AWS OFFICIALUpdated 2 years ago
- AWS OFFICIALUpdated a year ago
#1, yes, the console lets you go to an object in an access point and it shows, in properties, the URL of the object, thus "the object URL as reported by the console". #2, "open read policy" as a policy that openly allows reading thus enabling, e.g., anonymous access. #3, you are right, I haven't spotted that. But the docs are incoherent when they say you can replace the access point alias for the bucket name in any operation (or something along those lines)
is there any way for me to allow public access using access endpoint ?
It clearly says you can't...