An error occurred (AccessDenied) when calling the ListObjectsV2 operation: Access Denied

Question

Just done creating a cluster and connecting to it... Now when I try to list the s3 bucket via: aws s3 ls bucketname,
It give me ERROR message like:
An error occurred (AccessDenied) when calling the ListObjectsV2 operation: Access Denied.
I was wondering if someone has the same issue and how I should resolve it. I am a IAM user, not the account manager.

Answer

Hello,

The error suggests that your IAM identity (your IAM user here) does not have the permission to List the bucket (s3:ListBucket action) in question.

Please refer this Knowledge Article on how to provide this permission to your IAM identity - https://aws.amazon.com/premiumsupport/knowledge-center/s3-access-denied-listobjects-sync/

In case your IAM user and S3 bucket belong to 2 different AWS accounts, make sure that in addition to the above, your bucket policy also gives permission to your IAM user to perform ListObjectsV2 operation.

Thanks

Answer

If you have CloudTrails enabled for that user, you can use IAM Access Analyzer under that user to find out what policies you need to add.  Check out this documentation.  https://docs.aws.amazon.com/IAM/latest/UserGuide/access-analyzer-policy-generation.html

An error occurred (AccessDenied) when calling the ListObjectsV2 operation: Access Denied

Relevant questions

Include s3:ListObjectsV2 as action in bucket policy

s3 no sign request didn't work

An error occurred (AccessDenied) when calling the ListObjectsV2 operation: Access Denied

Can not select multiple S3 bucket from Security & permissions page

VM Export: An error occurred (Invalid Parameter) when calling the ExportImage operation: Access denied to the bucket

List contents of buckets

Public access downloading from bucket

CLI cp returns: ...GetObjectTagging...not implemented

AWS Cli Error

Access bucket s3 from a role on another account