Why is my S3 Lambda Trigger not executed for larger objects uploaded to S3 with KMS key

When uploading a large file (I tried it with 60 MB) to S3 using e.g. browser upload with an AWS KMS managed customer master key (SSE-KMS)(!), no 'ObjectCreated'-Events will be triggered. As a consequence an attached lambda function won't trigger.

The same setup works without any kind of issues when uploading smaller files (I tried it with 2MB) That is quite strange and I wonder, why it has not been fixed yet. Can you provide guidance here?

Further evidence next to my own observation:

https://stackoverflow.com/questions/67917878/aws-s3-lambda-function-doesnt-trigger-when-upload-large-file#comment125169885_67917878

https://stackoverflow.com/questions/61125071/lambda-not-invoking-if-the-uploaded-files-are-large-in-size-in-s3-bucket#comment125169907_61125071

https://forums.aws.amazon.com/thread.jspa?messageID=588242&#588242 (last post)

Since no one was able to provide an answer that actually tackles the problem in those posts, it looks like this a bug to me. In that case I would suggest to fix it :)

mike
3년 전
Is the event you're listening for "s3:ObjectCreated:*", specifically with the wildcard on the end?
And
3년 전
I just used the web-interface to set it up. There is no option to define any wildcards. https://paste.pics/FRKFU

When looking at the trigger details (within the lambda function's trigger configuration) it just says: "Event type: ObjectCreated"
And
3년 전
For the sake of completeness I added a second trigger for the Multipart Upload (see screenshot). As assumed there was no change in behavior: https://paste.pics/FRKRU As stated I am using an AWS KMS managed customer master key (SSE-KMS) on the bucket and for the upload
And
3년 전
Does the lambda function need the "AmazonS3ReadOnlyAccess" Policy to allow invocation via S3 multipart upload trigger?

주제

스토리지 보안, 신원 및 규정 준수 서버리스 컴퓨팅 애플리케이션 통합

태그

아마존 심플 스토리지 서비스 AWS 키 관리 서비스 AWS Lambda 아마존 EventBridge

언어

English

And

질문됨 3년 전2.4천회 조회

1개 답변

최신
최다 투표
가장 많은 댓글

이 답변이 도움이 되었나요?커뮤니티가 여러분의 지식을 활용할 수 있도록 정답을 찬성하세요.

Expanding on the comment by @mike, your small files would be uploaded in one piece whereas large ones (over 5MB) would be multi-part uploads that are different API calls. So depending how you defined your trigger conditions you could be picking up one but not the other.

전문가

Steve Kinsman

답변함 3년 전

And
3년 전
I just used the web-interface to set it up. There is no option to define any wildcards. https://paste.pics/FRKFU

When looking at the trigger details (within the lambda function's trigger configuration) it just says: "Event type: ObjectCreated"

Why is my S3 Lambda Trigger not executed for larger objects uploaded to S3 with KMS key

관련 콘텐츠