[Cyberduck-trac] [Cyberduck] #9063: Error Deleting File from S3 bucket when using restricted access IAM user

[Cyberduck]

#9063: Error Deleting File from S3 bucket when using restricted access IAM user
-------------------------+--------------------------------
    Reporter:  jjspierx  |      Owner:  jjspierx
        Type:  defect    |     Status:  new
    Priority:  normal    |  Milestone:
   Component:  s3        |    Version:  4.7.2
    Severity:  normal    |   Keywords:  S3, Delete, Failed
Architecture:  Intel     |   Platform:  Windows 7
-------------------------+--------------------------------
 The error is: "Upload FileName failed. Access Denied, Please contact your
 web hosting service provider for assistance."

 It is odd that the error is Upload failed, while I am attempting to delete
 a file from S3.  If I hit refresh after receiving the error, the file is
 gone, so the file delete operation is successful, and the error is
 occuring after the delete.

 This error does not occur when using an IAM user with full S3 access.  The
 error only happens using IAM users that are restricted to a particular
 bucket.  I have an IAM policy set up to allow GET/PUT/DELETE object access
 to a specific bucket, and the error only occurs when logged into S3 via
 Cyberduck using a user with that IAM policy.  Looking at the Log Drawer
 below, it looks like the first request to S3 is a DELETE, which appears to
 work just fine.  After the delete, a GET is requested which receives a 403
 forbidden response.


 {{{
 DELETE /McCarthy%20CEO.pdf HTTP/1.1
 Date: Tue, 20 Oct 2015 12:47:14 GMT
 Authorization: AWS redacted:redacted
 Host: redacted.s3.amazonaws.com:443
 Connection: Keep-Alive
 User-Agent: Cyberduck/4.7.2.18004 (Windows 7/6.1) (x86)
 HTTP/1.1 204 No Content
 x-amz-id-2: redacted
 x-amz-request-id: A6174417D5AB8F2E
 Date: Tue, 20 Oct 2015 12:47:09 GMT
 Server: AmazonS3
 GET /?prefix=McCarthy%20CEO.pdf&uploads HTTP/1.1
 Date: Tue, 20 Oct 2015 12:47:14 GMT
 x-amz-request-payer: requester
 Authorization: AWS redacted
 Host: expressmr.s3.amazonaws.com:443
 Connection: Keep-Alive
 User-Agent: Cyberduck/4.7.2.18004 (Windows 7/6.1) (x86)
 HTTP/1.1 403 Forbidden
 x-amz-request-id: 8DC431F02DCA5DA7
 x-amz-id-2:
 A1nyJ2AF47eDRWzNr0lCWTL3+tPhO8twodaP/KztJL/0e4BIpXjiemsp/TFit6st/pqshMKe4ko=
 Content-Type: application/xml
 Transfer-Encoding: chunked
 Date: Tue, 20 Oct 2015 12:47:07 GMT

 }}}

-- 
Ticket URL: <https://trac.cyberduck.io/ticket/9063>
Cyberduck <https://cyberduck.io>
Libre FTP, SFTP, WebDAV, S3 & OpenStack Swift browser for Mac and Windows