Why is a simple mounting of an aws-s3 drive so hard?

What is the problem you are having with rclone?

rclone mount --use-server-modtime --vfs-cache-mode full aws-s3:/ f/

should've been enough. Apparently not.

I don't get it, since AWS_ACCESS_KEY_ID=. AWS_SECRET_ACCESS_KEY=. goofys aws-s3:/ f/ is enough.

I have a "good enough" (I guess) policy to access it:

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": [
                "s3:GetBucketLocation",
                "s3:ListBucket",
                "s3:ListBucketMultipartUploads"
            ],
            "Resource": "arn:aws:s3:::aws-s3"
        },
        {
            "Effect": "Allow",
            "Action": [
                "s3:AbortMultipartUpload",
                "s3:DeleteObject",
                "s3:GetObject",
                "s3:PutObject",
                "s3:PutObjectAcl",
                "s3:ListMultipartUploadParts"
            ],
            "Resource": "arn:aws:s3:::aws-s3/*"
        }
    ]
}

Run the command 'rclone version' and share the full output of the command.

$ rclone version
rclone v1.64.0-beta.7120.00512e130
- os/version: ubuntu 20.04 (64 bit)
- os/kernel: 5.15.0-107-generic (x86_64)
- os/type: linux
- os/arch: amd64
- go/version: go1.20.5
- go/linking: static
- go/tags: none

Which cloud storage system are you using? (eg Google Drive)

aws s3

The command you were trying to run (eg rclone copy /tmp remote:tmp)

^^^

Paste command here

The rclone config contents with secrets removed.

[aws-s3]
type = s3
provider = AWS
access_key_id = 
secret_access_key = 
region = eu-central-1
location_constraint = eu-central-1
acl = public-read

A log from the command with the -vv flag

<3>ERROR : /: Dir.Stat error: AccessDenied: Access Denied
	status code: 403, request id: K, host id: a+b/c+d/e+f/g+h+i=
<3>ERROR : IO error: AccessDenied: Access Denied
	status code: 403, request id: K, host id: a+b/c+d/e+f/g+h+i=
<3>ERROR : /: Dir.Stat error: AccessDenied: Access Denied
	status code: 403, request id: L, host id: j=
<3>ERROR : IO error: AccessDenied: Access Denied
	status code: 403, request id: L, host id: j=

hi,

run the commands with -vv for debug output.

fwiw, i always test using a simple command, such as rclone lsd aws-s3: -vv

the rclone docs has a example policy.

also, that is an old beta version of rclone.
can run rclone selfupdate

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.