I get Access Denied while load images from buckets

0

Hello I get my images from my Bucket but I face this error

This XML file does not appear to have any style information associated with it. The document tree is shown below. <Error> <Code>AccessDenied</Code> <Message>Access Denied</Message> <RequestId>JJ93V4KF04RY0T7A</RequestId> <HostId>fT2qnhHyF6q9HUDK+NaSieEZKfk69CvY/zASYDMd2s19GsogHrRQCs4TnPjeDey+pEXuDpQsPCU=</HostId> </Error>

even when I set the object public I get it.

Is it possible to help me?

Maryam
已提问 9 个月前246 查看次数
2 回答
0

Hello. have you set the bucket policy? you need to specify the principal and effect of that ie s3:getobject and the resources e.g yourbucket/* meaning you can see and get the object. that's what i think is missing. Here is an example of a bucket policy using a policy generator from your s3 bucket console in the permissions tab ->edit policy and then click on the policy generator, make sure u copy the ARN as well which you will use to paste in the generator.

{ "Id": "Policy1692788816796", "Version": "2012-10-17", "Statement": [ { "Sid": "Stmt1692788810811", "Action": [ "s3:GetObject" ], "Effect": "Allow", "Resource": "arn:aws:s3:::animals/", "Principal": "" } ] }

Kazman
已回答 9 个月前
0

There are few things, that you need to make sure of and are as below:

  1. Your IAM role/user has access to that s3 bucket and it's objects through identity based policies
  2. There should not be explicit deny at bucket policy, if there is any explicit deny at bucket level, then also you'll not be able to access the bucket object.
  3. If s3 bucket is SSE-KMS CMK encrypted, make sure your IAM user/role has access to that KMS key
  4. There is no explicit deny at KMS key policy

Once you make sure of all the above points, you should be good.

profile pictureAWS
专家
已回答 9 个月前
profile pictureAWS
专家
已审核 9 个月前

您未登录。 登录 发布回答。

一个好的回答可以清楚地解答问题和提供建设性反馈,并能促进提问者的职业发展。

回答问题的准则

相关内容