Do not input private or sensitive data. View Qlik Privacy & Cookie Policy.
Skip to main content

Announcements
Join us in Bucharest on Sept 18th for Qlik's AI Reality Tour! Register Now
cancel
Showing results for 
Search instead for 
Did you mean: 
YPMAL
Contributor III
Contributor III

access denied when encryption is on in ts3put

I have configured s3 bucket and able to put object when default encryption is aws-kms.

i have created customer managed key as well. 

 

so i am able to connect using access key , secrete key and customer master key.

 

now after apply following policy to bucket i am getting error as access denied.

 

{
"Version": "2012-10-17",
"Id": "BUCKETPOLICY",
"Statement": [

{
"Sid": "DenyIncorrectEncryptionHeaders",
"Effect": "Deny",
"Principal": "*",
"Action": "s30683p000009MAB6.pngutObject",
"Resource": "arn:aws:s3:::bucketname/*",
"Condition": {
"StringNotEquals": {
"s3:x-amz-server-side-encryption": "aws:kms",
"s3:x-amz-server-side-encryption-aws-kms-key-id": "arn************************************************"
}
}
}
]
}

 

without bucket policy and with same credentials i am able to put the data. Then why bucket policy is denying access?

Labels (1)
  • Other

2 Replies
Anonymous
Not applicable

This is a policy to deny access. You may need to give a bit more detail here.

YPMAL
Contributor III
Contributor III
Author

i got the solution. Server side encryption in ts3put should be unchecked when that policy is applied on the bucket.