amazon web services - Lambda S3 permission denied in s3-get-object blueprint -

-

i'm trying lambda read file off s3 bucket using s3-get-object blueprint in response file post events.

even when bucket has full public access , full permissions:

{ "version": "2012-10-17", "id": "policy1468930000031", "statement": [     {         "sid": "stmt1468929998580",         "effect": "allow",         "principal": "*",         "action": "s3:*",         "resource": "arn:aws:s3:::xlp-uploads/*"     }   ] }

and lambda role has full s3 , lambda access, still access denied when running example code.

this lambda code in blueprint:

'use strict'; console.log('loading function');  let aws = require('aws-sdk'); let s3 = new aws.s3({ apiversion: '2006-03-01' });  exports.handler = (event, context, callback) => {     //console.log('received event:', json.stringify(event, null, 2));      // object event , show content type     const bucket = event.records[0].s3.bucket.name;     const key = decodeuricomponent(event.records[0].s3.object.key.replace(/\+/g, ' '));     const params = {         bucket: bucket,         key: key     };     s3.getobject(params, (err, data) => {         if (err) {             console.log(err);             const message = `error getting object ${key} bucket ${bucket}. make sure exist , bucket in same region function.`;             console.log(message);             callback(message);         } else {             console.log('content type:', data.contenttype);             callback(null, data.contenttype);         }     }); };

and error is:

{ [accessdenied: access denied]   message: 'access denied',   code: 'accessdenied',   region: null,   time: tue jul 19 2016 12:27:28 gmt+0000 (utc),

i figured issue out.

i tried post file s3 using rest api file ends in bucket no permissions , not inherit bucket's permissions.

i switched post request accepts acl parameters , gives file permissions in place.


Comments

Post a Comment

Popular posts from this blog

java - Suppress Jboss version details from HTTP error response -

-
my jboss verson jboss eap 6.3 when kind of error response sent jboss, adds server information response. following sample row response: http/1.1 400 bad request server: apache-coyote/1.1 content-type: text/html;charset=utf-8 content-length: 2391 date: tue, 19 jul 2016 09:30:46 gmt connection: close jboss web/7.4.8.final-redhat-4 - jbweb000064: error report jbweb000065: http status 400 - org.codehaus.jackson.map.jsonmappingexception: can not construct instance of mybean.type string value 'xyz': value not 1 of declared enum instance names @ [source: org.jboss.resteasy.core.interception.messagebodyreadercontextimpl$inputstreamwrapper@5e421c2b; line: 14, column: 26] (through reference chain: requestargs["request"]) jbweb000309: type jbweb000067: status report jbweb000068: message org.codehaus.jackson.map.jsonmappingexception: can not construct instance of mybean.type string value 'xyz': value not 1 of declared enum instance names @ [source: org.jboss...
Read more

gridview - Yii2 DataPorivider $totalSum for a column -

-
i have order , ordersearch models. in order list (actionindex) gridview there filtering , sorting. on of columns in order order_total (sum of products in order). i need implement sum of order_total in gridview. if manually counting activedataprovider->getmodels() array_map spend 3 seconds 3000 orders (localhost). don't want miss time. i see 2 ways make faster: create cache every filter , update lifetime (horrible) the interesting can right in ordersearch->search() method $query method. don't understand how can pass in controller. example of code 2nd way: class ordersearch extends order { public $totalsum; public function search($params) { $query = order::find(); $dataprovider = new activedataprovider([ 'query' => $query, ]); $this->load($params); $this->totalsum = $query->sum('order_total'); // works fast return $dataprovider; } } after i...
Read more

Sass watch command compiles .scss files before full sftp upload -

-
i use winscp download , edit .scss files , sass on linux (on server) compile them .css . after saving file, use: sass scss/style.scss css/style.css , replaces css file compiled sccs. the problem i want skip part return command line after editing scss file, sake of automation , saving time. but, if use watch command: sass --watch scss/style.scss:css/style.css synchronize 2 files, alerts nonexistent css errors pop up: change detected to: scss/style.scss error scss/style.scss (line 232: invalid css after "...ht: bold; line-": expected "{", "") note that when file uploads quicker usual (sometimes happens) watch command job, no errors. this because, when file upload takes time, sass compiles scss file (on server) before uploaded remote folder. thus, compiles part of file, resulting in css errors. is there way set timer watch command waits few seconds after detects changes , before compiling? any other way overcome is, of course, ...
Read more