Access Denied

[5k3105]

Please fill out the sections below to help us address your issue.

Version of AWS SDK for Go?

Tested latest version + (1.20.10, 1.23.20, 1.16.10, 1.15.0, 1.15.30, 1.12.20) by updating go mod file.

Version of Go (go version)?

1.12

What issue did you see?

AccessDenied: Access Denied
        status code: 403, request id: x:x:x:x, host id: x

Steps to reproduce

Using CopyObject but probably creds for any operation but read will fail.

Fyi, using a non-amazon S3 object store (Dell/EMC ECS).
Old compiled binaries still work but not sure what version of sdk because before go-mod.
I'd just like to know what source file emits this error.

Since I've tried many past versions I have a feeling it's an external library that has changed?

Thanks

[diehlaws]

Hi @5k3105, thanks for reaching out to us. The error you're receiving is a RequestError coming from the package internal/s3err. Unfortunately the cause of this behavior may be tricky to pinpoint since you're not sure which version of the SDK was working as expected, however you're welcome to review your changelog for changes related to service/s3, aws/session, and/or aws/credentials to see if any of those changes seem relevant to this behavior.

[5k3105]

Hi @diehlaws ,

I am working in windows.
Reminder that this is not AWS but S3 clone Dell EMC.

I removed go v1.12 and updated to v1.13.4
Recompiled using github.com/aws/aws-sdk-go v1.25.41

I now have this error:

err: SignatureDoesNotMatch: The request signature we calculated does not match the signature you provided. Check your Secret Access Key and signing method. For more information, see REST Authentication and SOAP Authentication for details.
        status code: 403, request id: x:x:x:x, host id:

I am going to guess this must be a change in golang.org/x/crypto ?

Maybe having to do with aws/request or service/s3/s3crypto/kms_key_handler.go ?

Quick research (aws/aws-cli#602) suggests either time sync of OS or credentials special characters parsed incorrectly ie

• made sure time is sync'd correctly (still error'd)
• all my creds have a special character in them like plus or slash.

Suggestions?
Thanks

[5k3105]

Lifecycle policy confusion on my part.
Resolved.