Permission problems with ec2 image builder and s3 logs

0

I am new to EC2 Image Builder but. one of the things it wanted was a S3 bucket to store is logs in so I created a bucket and added a bucket policy that allows the account Image Builder is running (the same as the bucket) full access to write to the bucket. I also added s3 full access to the IAM role that Image Builder is giving the instance.

But when I run Builder I get this errErrorMessage

failed to upload file /var/lib/amazon/toe/TOE_2023-09-14_18-20-24_UTC-0_5fa1da0a-532b-11ee-93ba-024c054ce7c5/D0__reboot-linux__1.0.1_1.yml to s3://dev-us-logs/aws-ec2-logs/EC2ImageBuilder/TOE_2023-09-14_18-20-24_UTC-0_5fa1da0a-532b-11ee-93ba-024c054ce7c5/D0__reboot-linux__1.0.1_1.yml with error 'operation error S3: PutObject, https response error StatusCode: 403, RequestID: 42C03VD4B7Z5706V, HostID: NiutkRvqRzPQJFI3Sa3ffxtb6lNibTe3Hr7FrONeeXKVYpNPDThhe7wETNzISTcXVBEYb5feKPM=, api error AccessDenied: Access Denied'or:

Where am I missing permissions to allow this?

  • I had thought of the keys too. But we are using Server-side encryption with Amazon S3 managed keys (SSE-S3). So we should be good. I will check out the rest of the page you sent me and the video to see if there is something else I am missing.

질문됨 8달 전450회 조회
1개 답변
0

First thing that came to mind is encryption, and if KMS is used then whether ImageBuilder has the privileges to utilise the keys?

This is one of several things identified that can cause 403 errors, and it would be worth stepping through all of them https://repost.aws/knowledge-center/s3-403-forbidden-error

The associated video is helpful as well https://www.youtube.com/watch?v=rn4qLXhMesg

profile picture
전문가
Steve_M
답변함 8달 전
  • I looked at the video and the repots page but did not find anything that helped. In the end I just removed the bucket from the config and it got past that step.

로그인하지 않았습니다. 로그인해야 답변을 게시할 수 있습니다.

좋은 답변은 질문에 명확하게 답하고 건설적인 피드백을 제공하며 질문자의 전문적인 성장을 장려합니다.

질문 답변하기에 대한 가이드라인

관련 콘텐츠