`Access Denied` for some files, when syncing bucketsCan I limit user access to AWS S3 buckets?No permissions for files in Amazon s3 for adminAccess Denied when calling the CreateInvalidation operation on AWS CLIS3 restoration using s3api get-object is not working in aws china regionHow to not conflict between policies on AWS?Access Denied when syncing between s3 buckets on different AWS accountsAWS S3 access denied to actual object when simulator says access is allowedMoving 1TB / 1 million files across buckets in same region cheaplyIAM user with DeleteObject permissions cannot delete from S3 bucketOpsworks Stack and S3 access, can't get files.
What is the origin of Scooby-Doo's name?
How does DC work with natural 20?
Should I include an appendix for inessential, yet related worldbuilding to my story?
Music theory behind A chord in the key of G
What is "industrial ethernet"?
Is "Busen" just the area between the breasts?
Are all Ringwraiths called Nazgûl in LotR?
Android Material and appcompat Manifest merger failed in react-native or ExpoKit
Did the CIA blow up a Siberian pipeline in 1982?
Improve appearance of the table in Latex
Is there a term for the belief that "if it's legal, it's moral"?
Putting a plot inside a tab
Dates on degrees don’t make sense – will people care?
Excluding a rectangular region from an image in FITS
Methodology: Writing unit tests for another developer
Count All Possible Unique Combinations of Letters in a Word
Am I legally required to provide a (GPL licensed) source code even after a project is abandoned?
Is it illegal to withhold someone's passport and green card in California?
Causes of High CHTs
How do I choose a villain in the Waterdeep: Dragon Heist adventure?
Encounter design and XP thresholds
Cut the gold chain
Where's this swanky house and vineyard near a mountain?
Do I need a shock-proof watch for cycling?
`Access Denied` for some files, when syncing buckets
Can I limit user access to AWS S3 buckets?No permissions for files in Amazon s3 for adminAccess Denied when calling the CreateInvalidation operation on AWS CLIS3 restoration using s3api get-object is not working in aws china regionHow to not conflict between policies on AWS?Access Denied when syncing between s3 buckets on different AWS accountsAWS S3 access denied to actual object when simulator says access is allowedMoving 1TB / 1 million files across buckets in same region cheaplyIAM user with DeleteObject permissions cannot delete from S3 bucketOpsworks Stack and S3 access, can't get files.
.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty height:90px;width:728px;box-sizing:border-box;
I'm using awscli to sync 2 buckets (same account):
aws s3 sync --only-show-errors s3://bucket-1 s3://bucket-2
but for some files I get permission errors:
copy failed: s3://bucket-1/dirname/file.flac to s3://bucket-2/dirname/file.flac An error occurred (AccessDenied) when calling the UploadPartCopy operation: Access Denied
(in some cases the the failing operation is CopyObject)
this only seems to happen for .flac files. all other files are .mp3s, so the only difference is I can think of is the file size.
since I'm using a user with full s3 permissions for this, I don't understand why this is happening (or how this could be fixed).
amazon-s3 aws-cli
asked Aug 21 '18 at 15:08
kindoflikekindoflike
1064
add a comment |
I'm using awscli to sync 2 buckets (same account):
aws s3 sync --only-show-errors s3://bucket-1 s3://bucket-2
but for some files I get permission errors:
copy failed: s3://bucket-1/dirname/file.flac to s3://bucket-2/dirname/file.flac An error occurred (AccessDenied) when calling the UploadPartCopy operation: Access Denied
(in some cases the the failing operation is CopyObject)
this only seems to happen for .flac files. all other files are .mp3s, so the only difference is I can think of is the file size.
since I'm using a user with full s3 permissions for this, I don't understand why this is happening (or how this could be fixed).
amazon-s3 aws-cli
asked Aug 21 '18 at 15:08
kindoflikekindoflike
1064
did you get your problem answered? If yes please accept one of the answers to reward the responders for the time they spent answering you. Thanks.
– MLu
Sep 20 '18 at 3:26
add a comment |
I'm using awscli to sync 2 buckets (same account):
aws s3 sync --only-show-errors s3://bucket-1 s3://bucket-2
but for some files I get permission errors:
copy failed: s3://bucket-1/dirname/file.flac to s3://bucket-2/dirname/file.flac An error occurred (AccessDenied) when calling the UploadPartCopy operation: Access Denied
(in some cases the the failing operation is CopyObject)
this only seems to happen for .flac files. all other files are .mp3s, so the only difference is I can think of is the file size.
since I'm using a user with full s3 permissions for this, I don't understand why this is happening (or how this could be fixed).
amazon-s3 aws-cli
asked Aug 21 '18 at 15:08
kindoflikekindoflike
1064
I'm using awscli to sync 2 buckets (same account):
aws s3 sync --only-show-errors s3://bucket-1 s3://bucket-2
but for some files I get permission errors:
copy failed: s3://bucket-1/dirname/file.flac to s3://bucket-2/dirname/file.flac An error occurred (AccessDenied) when calling the UploadPartCopy operation: Access Denied
(in some cases the the failing operation is CopyObject)
this only seems to happen for .flac files. all other files are .mp3s, so the only difference is I can think of is the file size.
since I'm using a user with full s3 permissions for this, I don't understand why this is happening (or how this could be fixed).
amazon-s3 aws-cli
amazon-s3 aws-cli
asked Aug 21 '18 at 15:08
kindoflikekindoflike
1064
asked Aug 21 '18 at 15:08
kindoflikekindoflike
1064
edited Aug 21 '18 at 15:46
kindoflike
asked Aug 21 '18 at 15:08
kindoflikekindoflike
1064
asked Aug 21 '18 at 15:08
kindoflikekindoflike
1064
asked Aug 21 '18 at 15:08
kindoflikekindoflike
1064
1064
did you get your problem answered? If yes please accept one of the answers to reward the responders for the time they spent answering you. Thanks.
– MLu
Sep 20 '18 at 3:26
add a comment |
did you get your problem answered? If yes please accept one of the answers to reward the responders for the time they spent answering you. Thanks.
– MLu
Sep 20 '18 at 3:26
did you get your problem answered? If yes please accept one of the answers to reward the responders for the time they spent answering you. Thanks.
– MLu
Sep 20 '18 at 3:26
did you get your problem answered? If yes please accept one of the answers to reward the responders for the time they spent answering you. Thanks.
– MLu
Sep 20 '18 at 3:26
add a comment |
1 Answer
1
active
oldest
votes
Could it be that the object is owned by a different account?
It may happen when a bucket in AWS account AAA is writable by AWS account BBB, e.g. through BucketPolicy, but the writer (in BBB) didn't specify --acl bucket-owner-full-control permission when uploading it.
Check the object's ACL using:
aws s3api get-object-acl --bucket bucket-1 --key dirname/file.flac
Similar for the destination - if an existing object is owned by a different account you won't be able to overwrite it. That's why UploadPartCopy would fail.
Hope that helps.
answered Sep 16 '18 at 8:45
MLuMLu
10.6k22546
add a comment |
Your Answer
StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "2"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);
else
createEditor();
);
function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader:
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
,
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);
);
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f927364%2faccess-denied-for-some-files-when-syncing-buckets%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
Could it be that the object is owned by a different account?
It may happen when a bucket in AWS account AAA is writable by AWS account BBB, e.g. through BucketPolicy, but the writer (in BBB) didn't specify --acl bucket-owner-full-control permission when uploading it.
Check the object's ACL using:
aws s3api get-object-acl --bucket bucket-1 --key dirname/file.flac
Similar for the destination - if an existing object is owned by a different account you won't be able to overwrite it. That's why UploadPartCopy would fail.
Hope that helps.
answered Sep 16 '18 at 8:45
MLuMLu
10.6k22546
add a comment |
Could it be that the object is owned by a different account?
It may happen when a bucket in AWS account AAA is writable by AWS account BBB, e.g. through BucketPolicy, but the writer (in BBB) didn't specify --acl bucket-owner-full-control permission when uploading it.
Check the object's ACL using:
aws s3api get-object-acl --bucket bucket-1 --key dirname/file.flac
Similar for the destination - if an existing object is owned by a different account you won't be able to overwrite it. That's why UploadPartCopy would fail.
Hope that helps.
answered Sep 16 '18 at 8:45
MLuMLu
10.6k22546
add a comment |
Could it be that the object is owned by a different account?
It may happen when a bucket in AWS account AAA is writable by AWS account BBB, e.g. through BucketPolicy, but the writer (in BBB) didn't specify --acl bucket-owner-full-control permission when uploading it.
Check the object's ACL using:
aws s3api get-object-acl --bucket bucket-1 --key dirname/file.flac
Similar for the destination - if an existing object is owned by a different account you won't be able to overwrite it. That's why UploadPartCopy would fail.
Hope that helps.
answered Sep 16 '18 at 8:45
MLuMLu
10.6k22546
Could it be that the object is owned by a different account?
It may happen when a bucket in AWS account AAA is writable by AWS account BBB, e.g. through BucketPolicy, but the writer (in BBB) didn't specify --acl bucket-owner-full-control permission when uploading it.
Check the object's ACL using:
aws s3api get-object-acl --bucket bucket-1 --key dirname/file.flac
Similar for the destination - if an existing object is owned by a different account you won't be able to overwrite it. That's why UploadPartCopy would fail.
Hope that helps.
answered Sep 16 '18 at 8:45
MLuMLu
10.6k22546
answered Sep 16 '18 at 8:45
MLuMLu
10.6k22546
answered Sep 16 '18 at 8:45
MLuMLu
10.6k22546
answered Sep 16 '18 at 8:45
MLuMLu
10.6k22546
10.6k22546
add a comment |
add a comment |
Thanks for contributing an answer to Server Fault!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f927364%2faccess-denied-for-some-files-when-syncing-buckets%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
did you get your problem answered? If yes please accept one of the answers to reward the responders for the time they spent answering you. Thanks.
– MLu
Sep 20 '18 at 3:26