Unlock a world of possibilities! Login now and discover the exclusive benefits awaiting you.
I have configured s3 bucket and able to put object when default encryption is aws-kms.
i have created customer managed key as well.
so i am able to connect using access key , secrete key and customer master key.
now after apply following policy to bucket i am getting error as access denied.
{
"Version": "2012-10-17",
"Id": "BUCKETPOLICY",
"Statement": [
{
"Sid": "DenyIncorrectEncryptionHeaders",
"Effect": "Deny",
"Principal": "*",
"Action": "s3utObject",
"Resource": "arn:aws:s3:::bucketname/*",
"Condition": {
"StringNotEquals": {
"s3:x-amz-server-side-encryption": "aws:kms",
"s3:x-amz-server-side-encryption-aws-kms-key-id": "arn************************************************"
}
}
}
]
}
without bucket policy and with same credentials i am able to put the data. Then why bucket policy is denying access?
This is a policy to deny access. You may need to give a bit more detail here.
i got the solution. Server side encryption in ts3put should be unchecked when that policy is applied on the bucket.