CloudLink Amazon S3バックアップ ストアで発生する「Access Denied/Status Code 403」エラー

Summary: Amazon S3バックアップ ストア構成で発生する「Access Denied/Status Code 403」エラーを解決する方法について説明します。

This article applies to This article does not apply to This article is not tied to any specific product. Not all product versions are identified in this article.
Check out other resources

Symptoms

Amazon S3バックアップ ストアへのアクセスをテストしているときに、「Access Denied」エラーが表示されます。


image.png
次のようなエラーが表示されます。
com.amazonaws.services.s3.model.AmazonS3Exception: Access Denied (Service: Amazon S3 Status Code: 403 Error Code: AccessDenied Request ID: WX2272G8B4XMDJKZ S3 Extended Request ID: [...]

Cause

Amazon S3上のバケットに対して設定されたバケット アクセス ポリシーが正しくありません。

Resolution

正しいバケット アクセス ポリシーを適用します。以下は、正しいバケット アクセス ポリシーの例です。 
{
    「バージョン」: "2012-10-17",
    「ステートメント」: [
        {
            「シド」: "ビジュアルエディター0",
            「効果」: "許可",
            「アクション」: [
                "s3:GetObjectVersionTagging",
                "s3:ReplicateObject",
                "s3:GetObjectAcl",
                "s3:GetIntelligentTieringConfiguration",
                "s3:PutLifecycleConfiguration",
                "s3:GetObjectVersionAcl"、
                "s3:PutObjectTagging",
                "s3:DeleteObject",
                "s3:DeleteObjectTagging",
                "s3:GetBucketPolicyStatus",
                "s3:GetObjectRetention",
                "s3:DeleteObjectVersionTagging",
                "s3:GetBucketNotification",
                "s3:GetReplicationConfiguration",
                "s3:PutObject",
                "s3:GetObject",
                "s3: PutBucketNotification",
                "s3: PutBucketLogging",
                "s3:GetAnalyticsConfiguration",
                "s3:GetObjectVersionForReplication",
                "s3:GetLifecycleConfiguration",
                "s3:GetInventoryConfiguration",
                "s3:GetBucketTagging",
                "s3:DeleteObjectVersion",
                "s3:GetBucketLogging",
                "s3: ListBucketVersions",
                "s3:ReplicateTags",
                "s3:RestoreObject",
                "s3: ListBucket",
                "s3:GetAccelerateConfiguration",
                "s3:GetBucketPolicy",
                "s3:PutEncryptionConfiguration",
                "s3:GetEncryptionConfiguration",
                "s3: AbortMultipartUpload",
                "s3:PutBucketTagging"、
                "s3:GetObjectTagging",
                "s3:GetMetricsConfiguration",
                "s3:PutBucketVersioning",
                "s3:GetBucketPublicAccessBlock",
                "s3:ListBucketMultipartUploads",
                "s3:PutObjectVersionTagging",
                "s3:GetBucketVersioning",
                "s3: GetBucketAcl",
                "s3:PutInventoryConfiguration",
                "s3:PutObjectRetention",
                "s3:GetBucketCORS",
                "s3:GetBucketLocation",
                "s3:ReplicateDelete",
                「s3:GetObjectVersion」
            ],
            「リソース」: [
                "arn:aws:s3:::BUCKET"、
                "arn:aws:s3:::BUCKET/*" (arn:aws:s3:::BUCKET/*)
            ]
        }
    ]
}

Affected Products

CloudLink SecureVM, CloudLink
Article Properties
Article Number: 000210609
Article Type: Solution
Last Modified: 26 Jun 2023
Version:  5
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.