I can't access to nvidia-gaming bucket (contains NVIDIA gaming drivers) from my EC2 with AmazonS3ReadOnlyAccess, another bucket is readable though

Question

I want to get NVIDIA gaming driver from nvidia-gaming bucket, which is described in official document https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/install-nvidia-driver.html#nvidia-gaming-driver .

to get NVIDIA gaming driver, I need to listing `s3://nvidia-gaming/windows/latest/` because I don't know about exact file name of driver. It should be available and it was available in some months before, but for now, we couldn't access it (AccessDenied error).

above official document says like this:

```powershell
$Bucket = "nvidia-gaming"
$KeyPrefix = "windows/latest"
$LocalPath = "$home\Desktop\NVIDIA"
$Objects = Get-S3Object -BucketName $Bucket -KeyPrefix $KeyPrefix -Region us-east-1
```

but it will fails with error:
```
Get-S3Object : Access Denied
発生場所 行:1 文字:12
+ $Objects = Get-S3Object -BucketName $Bucket -KeyPrefix $KeyPrefix -Re ...
+            ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : InvalidOperation: (Amazon.PowerShe...tS3ObjectCmdlet:GetS3ObjectCmdlet) [Get-S3Object]、I
    nvalidOperationException
    + FullyQualifiedErrorId : Amazon.S3.AmazonS3Exception,Amazon.PowerShell.Cmdlets.S3.GetS3ObjectCmdlet
```

even with AWS S3 CLI:

```
> aws s3 ls s3://nvidia-gaming/windows/latest/ --region us-east-1

An error occurred (AccessDenied) when calling the ListObjectsV2 operation: Access Denied
```

I already attached a AmazonS3ReadOnlyAccess to this instance through IAM roles and I could access an another bucket which contains NVIDIA GRID driver (`ec2-windows-nvidia-drivers` also from above official document) and/or our private S3 bucket:

```
> aws s3 ls s3://ec2-windows-nvidia-drivers/latest/ --region us-east-1
2024-06-12 06:38:15  503603312 552.55_grid_win10_win11_server2022_dch_64bit_international_aws_swl.exe
```

I think this is misconfiguration of `nvidia-gaming` bucket (=AWS side).

also I could access GRID driver `ec2-windows-nvidia-drivers` bucket from admin console from https://us-east-1.console.aws.amazon.com/s3/buckets/ec2-windows-nvidia-drivers?region=us-east-1&bucketType=general&tab=objects but not `nvidia-gaming` bucket https://us-east-1.console.aws.amazon.com/s3/buckets/nvidia-gaming?region=us-east-1&bucketType=general&tab=objects

I'm missing something? Is this works on your environment, or just misconfiguration on AWS (or maybe NVIDIA) side?

Riku_Kobayashi · Accepted Answer

It may not be the latest version, but I was able to download it from the S3 URL below.  
https://aws.amazon.com/jp/blogs/compute/building-a-high-performance-windows-workstation-on-aws-for-graphics-intensive-applications/  
```
https://nvidia-gaming.s3.amazonaws.com/windows/531.79_Cloud_Gaming_win10_win11_server2019_server2022_dch_64bit_international.exe
```

You can start the download by running the command below in PowerShell.  
```
Invoke-WebRequest -Uri https://nvidia-gaming.s3.amazonaws.com/windows/531.79_Cloud_Gaming_win10_win11_server2019_server2022_dch_64bit_international.exe -outfile 531.79_Cloud_Gaming_win10_win11_server2019_server2022_dch_64bit_international.exe
```

Riku_Kobayashi · Answer

Hello.

I tried running the same command in my environment, but the same error occurred.  
I am also using the same IAM policy.  
I think it's probably a configuration error on the AWS side.  
I am not sure when a fix will be made, but we encourage you to report that the script in the documentation is not available at the URL below.  
https://docs-feedback.aws.amazon.com/feedback.jsp?hidden_service_name=EC2&topic_url=https://docs.aws.amazon.com/en_us/AWSEC2/latest/UserGuide/install-nvidia-driver.html

Jonathan_D · Answer

It's old but I encountered this so hopefully this response will help people that look for an answer.
You need to attach an IAM policy to access the S3 bucket to the EC2 IAM role. Something like:
```
{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "AllowReadNVidiaS3Bucket",
            "Effect": "Allow",
            "Action": [
                "s3:Get*",
                "s3:List*",
                "s3:Describe*"
            ],
            "Resource": [
                "arn:aws:s3:::nvidia-gaming*"
            ]
        }
    ]
}
```

I can't access to nvidia-gaming bucket (contains NVIDIA gaming drivers) from my EC2 with AmazonS3ReadOnlyAccess, another bucket is readable though

Add your answer

Relevant content