access denied when encryption is on in ts3put

YPMAL — Sat, 16 Nov 2024 06:37:51 GMT

I have configured s3 bucket and able to put object when default encryption is aws-kms.

i have created customer managed key as well.

so i am able to connect using access key , secrete key and customer master key.

now after apply following policy to bucket i am getting error as access denied.

{
"Version": "2012-10-17",
"Id": "BUCKETPOLICY",
"Statement": [

{
"Sid": "DenyIncorrectEncryptionHeaders",
"Effect": "Deny",
"Principal": "*",
"Action": "s3utObject",
"Resource": "arn:aws:s3:::bucketname/*",
"Condition": {
"StringNotEquals": {
"s3:x-amz-server-side-encryption": "aws:kms",
"s3:x-amz-server-side-encryption-aws-kms-key-id": "arn************************************************"
}
}
}
]
}

without bucket policy and with same credentials i am able to put the data. Then why bucket policy is denying access?

Re: access denied when encryption is on in ts3put

Anonymous — Mon, 11 Feb 2019 15:40:03 GMT

This is a policy to deny access. You may need to give a bit more detail here.

Re: access denied when encryption is on in ts3put

YPMAL — Tue, 12 Feb 2019 12:04:23 GMT

i got the solution. Server side encryption in ts3put should be unchecked when that policy is applied on the bucket.

topic access denied when encryption is on in ts3put in Talend Studio

access denied when encryption is on in ts3put

Re: access denied when encryption is on in ts3put

Re: access denied when encryption is on in ts3put