I have two S3 buckets, one for backups one for uploads. I have one user/policy for both with full s3 access. I have both uploads and backups set to go to s3. Strangely, I can make a backup and it will end up on s3, but any kind of image upload or attachment attempts give Access Denied errors. I have tried rebuilding. I have created new buckets and policies. None of that has helped. This also seems to prevent adding Gravatar images. Sidekiq has a bunch of pending tasks saying: Jobs::HandledExceptionWrapper: Wrapped Aws::S3::Errors::AccessDenied: Access Denied I can manually add things on the AWS site to the uploads bucket. Also can do the same using the aws cli tool. Any thoughts?

If you see Access Denied, it may well be that it is indeed, denied. I had a simliar issue recently, you need to loosen access restriction on AWS just enough to resolve it.

The S3 user has all access to all buckets. (Uncertain why backups work but not upload.)

Mine was working fine for ages then broke, but modifying the access rights resolved it. Somewhere there was a change. [image] S3 Backup ... suspect access issue Support Getting an Access Denied issue in error log … which seems to be causing Sidekiq to stay paused after backups!! (which is interesting on its own) - is my access policy on IAM not generous enough?: { "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": [ "s3:GetBucketLocation", "s3:ListAllMyBuckets" ], "Resource": "*" }, { "Effect": "Allow", "…

I can try, but this is my current policy: { "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": "s3:*", "Resource": "*" } ] } So the user should be able to do anything.

Tried again with this, same issue - backups work but uploads do not: { "Version": "2012-10-17", "Statement": [ { "Sid": "VisualEditor0", "Effect": "Allow", "Action": [ "s3:PutAccountPublicAccessBlock", "s3:GetAccountPublicAccessBlock", "s3:ListAllMyBuckets", "s3:ListBucket", "s3:HeadBucket", "s3:GetBucketLocation" ], "Resource": "*" }, { "Sid": "VisualEditor1", "Effect": "Allow", "Action": "s3:*", "Resource": [ "arn:aws:s3:::gauntlet-forums-backup", "arn:aws:s3:::gauntlet-forums-storage", "arn:aws:s3:::gauntlet-forums-backup/*", "arn:aws:s3:::gantlet-forums-storage/*" ] }, { "Sid": "VisualEditor2", "Effect": "Allow", "Action": "s3:*", "Resource": "arn:aws:s3:::*/*" } ] }

Tried it with the policy in your post and in Set up file and image uploads to S3 - still no dice.

[image] Shane_Liebling: “arn:aws:s3:::gauntlet-forums-backup”, “arn:aws:s3:::gauntlet-forums-storage”, “arn:aws:s3:::gauntlet-forums-backup/*”, “arn:aws:s3:::gantlet-forums-storage/*” Looks like a typo to me.

Fixed typo. No change. Still not working.

Is your uploads bucket empty? Delete it and let Discourse create the bucket. Also, make sure you follow the instructions in Set up file and image uploads to S3.

Huzzah! Deleting the bucket fixed it! Thanks for that!

Policy and permission issues with s3 buckets?

Product Support Self-hosting

gerhard (Gerhard Schlager) December 23, 2018, 7:33pm 13

That’s so weird. I’ve seen that outcome a couple of times in the last few weeks. I’m not sure what’s going on with manually created buckets yet.

Topic		Replies	Views
S3 image upload access denied while backups upload working fine Self-hosting s3	22	3029	March 23, 2020
Set up file and image uploads to S3 Self-Hosting configuring , how-to	35	122370	October 25, 2025
S3 Backup ... suspect access issue Product Support	3	1989	September 16, 2018
Issues backing up to s3 Self-hosting backups , s3	4	1127	February 9, 2018
The bucket does not allow ACLs Product Support s3	4	2928	November 3, 2022

Policy and permission issues with s3 buckets?

Related topics