403 forbidden for thumbnails on s3 when running with CDN

Falco · April 26, 2023, 8:03pm

Oh, sorry I went by what is written in the project README.md

github.com/aws-samples/aws-cdk-for-discourse

README.md?plain=1

main


      
          
          1. [Amazon CloudFront](https://aws.amazon.com/cloudfront/) is used for CDN via S3 and the application load balancer
          2. [Amazon Route 53](https://aws.amazon.com/route53/) holds the hosted zone for DNS management to create verified outbound email domains along with domain certificates
          3. [Amazon S3](https://aws.amazon.com/route53/) holds user upload files and static assets in one bucket along with Discourse backups in another bucket
          4. [AWS Certificate Manager](https://aws.amazon.com/certificate-manager/) is used to create a DNS validated certificate
          5. [AWS Secrets Manager](https://aws.amazon.com/secrets-manager/) holds the initial setup credentials and created database credentials.
          6. [Amazon Cogntio](https://aws.amazon.com/cognito/) user pools are used via OpenID
          7. [Amazon SES](https://aws.amazon.com/ses/) handles outbound email notifications
          8. [AWS Systems Manager](https://aws.amazon.com/systems-manager/) Session Manager is used to connect to internal instances for debugging purposes
          9. [AWS Auto Scaling](https://aws.amazon.com/autoscaling/) will create the desired number of instances in the desired availability zones
          10. [Amazon EC2](https://aws.amazon.com/pm/ec2/) instances are bootstrapped via a user data script which pulls down the latest stable version of Discourse and sets up the app.yml then launches the [Discourse docker image](https://hub.docker.com/r/bitnami/discourse).
          11. [Amazon RDS](https://aws.amazon.com/rds/) Aurora serverless V2 Postgres database stores user details and posts
          12. [Amazon ElastiCache for Redis](https://aws.amazon.com/elasticache/redis/) is used as a caching layer
          
          ## Requirements
          1. Apache Maven 3.8.5 or greater installed
          2. Java 11 or greater installed
          3. <a href="https://aws.amazon.com/cdk/">AWS Cloud Development Kit</a> (CDK) 1.120.0 or higher
          4. Valid docker login credentials
          5. A domain name hosted by Route53 which is used to
              1. Create a subdomain for discourse

Good luck. Please update here if you find any clues.

Topic		Replies	Views
Issues with AWS CDN and S3 Self-hosting cdn , s3	23	325	January 29, 2026
Unable to setup S3 bucket Self-hosting uploads , s3	11	315	January 12, 2025
What are the right settings to use S3 bucket (with non-Amazon URL)? Self-hosting	19	4964	August 25, 2020
User avatars not in S3 but served via discourse_cdn_url Development	2	520	August 14, 2020
Want to understand s3_cdn_url files setting Support	7	2754	June 30, 2016

403 forbidden for thumbnails on s3 when running with CDN

Related topics