"Access Denied" exception while making GET and DELETE requests to Amazon S3 buckets

Question

I am currently facing an issue while making GET and DELETE requests to Amazon S3 buckets. I am receiving an API response with a status code of 500 and the following error message:
Amazon.S3.AmazonS3Exception: Access Denied

My objective is to retrieve a complete list of buckets using a GET request and delete a specific bucket using a DELETE request.

BUT When I perform these operations, I consistently encounter an "Access Denied" exception with the mentioned error message.

I have verified that I have the necessary permissions in my AWS Identity and Access Management (IAM) policies. Specifically, I have confirmed that the relevant IAM user or role has the required permissions to perform these actions.
I have reviewed my IAM policies and ensured that the s3:ListAllMyBuckets and s3:DeleteBucket actions are granted explicitly. However, despite these permissions being in place, I am still experiencing the "Access Denied" error.

Answer

here's my policy:
![my policy](/media/postImages/original/IMMP40nVECTiWfWzjc7D0xuA)
By the way, I checked the bucket policy section, there was an "Access" value

Answer

Hi,

Please check following to make sure you are not missing these things:

1. If you are seeing access issues while getting the objects from S3 bucket then check following:

Is S3 bucket is encrypted with SSE-KMS CMK, if:

Yes, then does IAM role have access to this KMS Key, if:

Yes, does KMS key have any explicit denied policy, if:

No, you are good for KMS key part.

Yes, then add IAM role to allowed role list in KMS key policy.

No, add KMS key permissions in IAM role.

No, check S3 bucket has explicit deny policy, if,

Yes, then add IAM role to allowed role list in bucket policy.

No, check if there is any SCP, which is blocking you to access/delete the bucket, if:

Yes, SCP may need to be revised.

No, you are good for bucket policy part as well.

2. If you are only seeing access issues while listing all S3 buckets or deleting a bucket, then:

Check if there is any service control policy(SCP) attached to your AWS account and permission boundary attached to your role, which is not letting you list buckets or delete the bucket

Answer

How do you perform Get and Delete requests?  
If you are using Lambda or EC2, make sure that the required IAM policies are set for the IAM roles.  
It is also possible that the S3 bucket policy is causing the problem, so please make sure the settings are correct.  
If the bucket policy has a deny section, the API execution will fail even if the IAM policy allows it.

Incidentally, the "s3:GetObject" action is required to perform S3 get objects.

By the way, would it be possible for you to share what policy you are using?

"Access Denied" exception while making GET and DELETE requests to Amazon S3 buckets

Relevant content