S3 Object Access Issue: Some Videos Unaccessible Despite Identical Permissions

0

Hey There,

I'm encountering a perplexing issue with my S3 bucket where some video objects are not accessible despite having identical permissions and settings as others that are accessible. All videos are in the same bucket, and the bucket policy is correctly configured to allow access (see policy below)

{ "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Principal": { "AWS": "" }, "Action": "s3:GetObject", "Resource": "arn:aws:s3:::video.myscreen.com.au/", "Condition": { "StringLike": { "aws:Referer": [ "https://thatwebcompany.com.au/", "https://lms.thatwebcompany.com.au/", "https://ms.itrainly.com/", "https://iwl.itrainly.com/", "https://twc.itrainly.com/", "https://myscreen.com.au/" ] } } } ] }

Here's a breakdown:

  1. Working Video URL:

  2. Non-working Video URL (after renaming a copy of the working video):

Steps Taken:

  • Verified identical permissions for both objects in AWS S3.
  • Moved the non-working video to the same object path as the working video.
  • Downloaded the working video, renamed it to the non-working video file name, and uploaded it back to S3. The renamed copy doesn't work.
  • Checked for any unusual characters in the file names.
  • Cleared browser cache and tested on different browsers and devices.
  • Checked AWS configurations including IAM policies, CORS settings, and bucket policies.
  • The Canonical ID's of the objects are identical
  • Neither files use AWS KMS encryption

Despite these steps, the issue persists. The error received is a 403 when trying to access the non-working video. Any insights or suggestions would be greatly appreciated!

Thank you.

Mark_K
질문됨 7달 전172회 조회
2개 답변
0

Did you see this document? You've gone through some of the steps you mention, but not all of them.

https://docs.aws.amazon.com/AmazonS3/latest/userguide/troubleshoot-403-errors.html

답변함 7달 전
0

The 2 things that jump out to me is the resource and principal.

You are only specifying the root and not objects in the resource.

Try

"Resource":[ "arn:aws:s3:::video.myscreen.com.au/", "arn:aws:s3:::video.myscreen.com.au/*" ]

And for principal

"Principal": { "AWS": "*" }

profile picture
전문가
답변함 7달 전

로그인하지 않았습니다. 로그인해야 답변을 게시할 수 있습니다.

좋은 답변은 질문에 명확하게 답하고 건설적인 피드백을 제공하며 질문자의 전문적인 성장을 장려합니다.

질문 답변하기에 대한 가이드라인

관련 콘텐츠