S3 Cross Region Replication Failure


Hey, I am trying to execute cross region replication for s3 object for a partticular prefix with KMs Enabled. I am Getting Error (Failure Reason) - SrcGetObjectNotPermitted. I am giving the [s3:GETObjectVersionForReplication ] Action to IAM Role policy that is attached to replication iam role. Can you please help!!

asked a year ago867 views
2 Answers

Most likely the s3:GetObjectVersionForReplication permission may be missing for the source bucket. You can refer the document for more detail. https://docs.aws.amazon.com/AmazonS3/latest/userguide/replication-failure-codes.html

answered a year ago

SrcGetObjectNotPermitted simply means that the IAM role was not allowed to perform a successful GET on the source object. Sometimes, it might be KMS encryption related. You can also check CloudTrail for KMS errors at the time of the replication failure. Decrypt, Encrypt or GenerateDataKey errors might give you some clues into what KMS permissions are required for a successful replication https://docs.aws.amazon.com/AmazonS3/latest/userguide/replication-config-for-kms-objects.html#replication-kms-permissions

profile pictureAWS
answered 10 months ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions