Access Denied error when uploading to Amazon S3

Chris Wasik

unread,

May 1, 2015, 5:30:59 PM5/1/15

to cybe...@googlegroups.com

I have an IAM user configured with the PutObject permission, and can properly use s3fox/s3 console to upload content, but CyberDuck gives me an 'Access Denied' error.

Does CyberDuck require additional permissions to upload files?

I'm using version 4.7 (17432) on windows 8.1.

Chris Wasik

unread,

May 4, 2015, 3:46:03 PM5/4/15

to cybe...@googlegroups.com

After looking through the debug logs, this may have to do with Cyberduck trying to request a version of the root directory (when it doesn't have permission to do so).

2015-05-04 15:35:43,781 [background-1] DEBUG org.apache.http.headers - http-outgoing-3 >> GET /?versioning HTTP/1.1
2015-05-04 15:35:43,781 [background-1] DEBUG org.apache.http.headers - http-outgoing-3 >> Date: Mon, 04 May 2015 19:35:43 GMT
2015-05-04 15:35:43,781 [background-1] DEBUG org.apache.http.headers - http-outgoing-3 >> Authorization: AWS [filtered]
2015-05-04 15:35:43,781 [background-1] DEBUG org.apache.http.headers - http-outgoing-3 >> Host: [filtered].s3.amazonaws.com:443
2015-05-04 15:35:43,781 [background-1] DEBUG org.apache.http.headers - http-outgoing-3 >> Connection: Keep-Alive
2015-05-04 15:35:43,781 [background-1] DEBUG org.apache.http.headers - http-outgoing-3 >> User-Agent: Cyberduck/4.7 (17432).17432 (Windows 8/6.2) (x86)
2015-05-04 15:35:43,810 [background-1] DEBUG org.apache.http.headers - http-outgoing-3 << HTTP/1.1 403 Forbidden
2015-05-04 15:35:43,810 [background-1] DEBUG org.apache.http.headers - http-outgoing-3 << x-amz-request-id: [filtered]
2015-05-04 15:35:43,810 [background-1] DEBUG org.apache.http.headers - http-outgoing-3 << x-amz-id-2: vD[filtered]

2015-05-04 15:35:43,810 [background-1] DEBUG org.apache.http.headers - http-outgoing-3 << Content-Type: application/xml
2015-05-04 15:35:43,810 [background-1] DEBUG org.apache.http.headers - http-outgoing-3 << Transfer-Encoding: chunked
2015-05-04 15:35:43,810 [background-1] DEBUG org.apache.http.headers - http-outgoing-3 << Date: Mon, 04 May 2015 19:35:40 GMT
2015-05-04 15:35:43,810 [background-1] DEBUG org.apache.http.headers - http-outgoing-3 << Server: AmazonS3
2015-05-04 15:35:43,810 [background-1] INFO  ch.cyberduck.core.Session - HTTP/1.1 403 Forbidden

Florian Einfalt

unread,

Sep 9, 2015, 4:51:25 AM9/9/15

to Cyberduck

I have a similar problem here. Using S3 Browser or Transmit (on the Mac) I can upload large files to our S3 bucket but not using Cyberduck, with the same Error message. My IAM policy is quite strict but it allows s3:PutObject on all keys.

Any idea which IAM resources are required to be allowed for this to work in Cyberduck?

Thanks.

Flo

On Monday, 4 May 2015 20:46:03 UTC+1, Chris Wasik wrote:

After looking through the debug logs, this may have to do with Cyberduck trying to request a version of the root directory (when it doesn't have permission to do so).

2015-05-04 15:35:43,781 [background-1] DEBUG org.apache.http.headers - http-outgoing-3 >> GET /?versioning HTTP/1.1 2015-05-04 15:35:43,781 [background-1] DEBUG org.apache.http.headers - http-outgoing-3 >> Date: Mon, 04 May 2015 19:35:43 GMT 2015-05-04 15:35:43,781 [background-1] DEBUG org.apache.http.headers - http-outgoing-3 >> Authorization: AWS [filtered] 2015-05-04 15:35:43,781 [background-1] DEBUG org.apache.http.headers - http-outgoing-3 >> Host: [filtered].s3.amazonaws.com:443 2015-05-04 15:35:43,781 [background-1] DEBUG org.apache.http.headers - http-outgoing-3 >> Connection: Keep-Alive 2015-05-04 15:35:43,781 [background-1] DEBUG org.apache.http.headers - http-outgoing-3 >> User-Agent: Cyberduck/4.7 (17432).17432 (Windows 8/6.2) (x86) 2015-05-04 15:35:43,810 [background-1] DEBUG org.apache.http.headers - http-outgoing-3 << HTTP/1.1 403 Forbidden 2015-05-04 15:35:43,810 [background-1] DEBUG org.apache.http.headers - http-outgoing-3 << x-amz-request-id: [filtered] 2015-05-04 15:35:43,810 [background-1] DEBUG org.apache.http.headers - http-outgoing-3 << x-amz-id-2: vD[filtered] 2015-05-04 15:35:43,810 [background-1] DEBUG org.apache.http.headers - http-outgoing-3 << Content-Type: application/xml 2015-05-04 15:35:43,810 [background-1] DEBUG org.apache.http.headers - http-outgoing-3 << Transfer-Encoding: chunked 2015-05-04 15:35:43,810 [background-1] DEBUG org.apache.http.headers - http-outgoing-3 << Date: Mon, 04 May 2015 19:35:40 GMT 2015-05-04 15:35:43,810 [background-1] DEBUG org.apache.http.headers - http-outgoing-3 << Server: AmazonS3 2015-05-04 15:35:43,810 [background-1]

...

Reply all

Reply to author

Forward