안개 젬 - S3 파일 삭제시 액세스 거부

나는 파일을 s3으로 업로드하기 위해 반송파가있는 안개 젬을 사용하고 있습니다. 나는 '안개 젬 - S3 파일 삭제시 액세스 거부

[fog][WARNING] fog: followed redirect to bucket-name.s3-us-west-2.amazonaws.com, connecting to the matching region will be more performant 
Excon::Error::Forbidden: Expected(204) <=> Actual(403 Forbidden) 
excon.error.response 
    :body   => "<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<Error><Code>AccessDenied</Code><Message>Access Denied</Message><RequestId>EB625F4C97AD368E</RequestId><HostId>E+We/GvBslMHoNn9nTT6Uw3t0qfJ9jXHCNkJRu0KOk5sk8WoFZbkaIyUB0WcWNPZuH2uCeoZTIo=</HostId></Error>" 
    :cookies  => [ 
    ] 
    :headers  => { 
    "Content-Type"  => "application/xml" 
    "Date"    => "Wed, 21 Dec 2016 14:48:53 GMT" 
    "Server"   => "AmazonS3" 
    "x-amz-id-2"  => "E+We/GvBslMHoNn9nTT6Uw3t0qfJ9jXHCNkJRu0KOk5sk8WoFZbkaIyUB0WcWNPZuH2uCeoZTIo=" 
    "x-amz-request-id" => "EB625F4C97AD368E" 
    } 
    :host   => "bucket-name.s3.amazonaws.com" 
    :local_address => "192.168.2.106" 
    :local_port => 51425 
    :path   => "/uploads/conta/pdf_conta/375/1530_09-2016.pdf" 
    :port   => 443 
    :reason_phrase => "Forbidden" 
    :remote_ip  => "52.216.66.16" 
    :status  => 403 
    :status_line => "HTTP/1.1 403 Forbidden\r\n" 

    from /home/ronanlopes/.rvm/gems/ruby-2.3.1/gems/excon-0.54.0/lib/excon/middlewares/expects.rb:7:in `response_call' 
    from /home/ronanlopes/.rvm/gems/ruby-2.3.1/gems/excon-0.54.0/lib/excon/middlewares/response_parser.rb:9:in `response_call' 
    from /home/ronanlopes/.rvm/gems/ruby-2.3.1/gems/excon-0.54.0/lib/excon/connection.rb:388:in `response' 
    from /home/ronanlopes/.rvm/gems/ruby-2.3.1/gems/excon-0.54.0/lib/excon/connection.rb:252:in `request' 
    from /home/ronanlopes/.rvm/gems/ruby-2.3.1/gems/excon-0.54.0/lib/excon/middlewares/idempotent.rb:27:in `error_call' 
    from /home/ronanlopes/.rvm/gems/ruby-2.3.1/gems/excon-0.54.0/lib/excon/middlewares/base.rb:11:in `error_call' 
    from /home/ronanlopes/.rvm/gems/ruby-2.3.1/gems/excon-0.54.0/lib/excon/middlewares/base.rb:11:in `error_call' 
    from /home/ronanlopes/.rvm/gems/ruby-2.3.1/gems/excon-0.54.0/lib/excon/connection.rb:272:in `rescue in request' 
    from /home/ronanlopes/.rvm/gems/ruby-2.3.1/gems/excon-0.54.0/lib/excon/connection.rb:215:in `request' 
    from /home/ronanlopes/.rvm/gems/ruby-2.3.1/gems/excon-0.54.0/lib/excon/middlewares/idempotent.rb:27:in `error_call' 
    from /home/ronanlopes/.rvm/gems/ruby-2.3.1/gems/excon-0.54.0/lib/excon/middlewares/base.rb:11:in `error_call' 
    from /home/ronanlopes/.rvm/gems/ruby-2.3.1/gems/excon-0.54.0/lib/excon/middlewares/base.rb:11:in `error_call' 
    from /home/ronanlopes/.rvm/gems/ruby-2.3.1/gems/excon-0.54.0/lib/excon/connection.rb:272:in `rescue in request' 
    from /home/ronanlopes/.rvm/gems/ruby-2.3.1/gems/excon-0.54.0/lib/excon/connection.rb:215:in `request' 
    from /home/ronanlopes/.rvm/gems/ruby-2.3.1/gems/excon-0.54.0/lib/excon/middlewares/idempotent.rb:27:in `error_call' 
    from /home/ronanlopes/.rvm/gems/ruby-2.3.1/gems/excon-0.54.0/lib/excon/middlewares/base.rb:11:in `error_call' 
... 36 levels... 
    from /home/ronanlopes/.rvm/gems/ruby-2.3.1/gems/railties-5.0.0.1/lib/rails/commands/console_helper.rb:9:in `start' 
    from /home/ronanlopes/.rvm/gems/ruby-2.3.1/gems/railties-5.0.0.1/lib/rails/commands/commands_tasks.rb:78:in `console' 
    from /home/ronanlopes/.rvm/gems/ruby-2.3.1/gems/railties-5.0.0.1/lib/rails/commands/commands_tasks.rb:49:in `run_command!' 
    from /home/ronanlopes/.rvm/gems/ruby-2.3.1/gems/railties-5.0.0.1/lib/rails/commands.rb:18:in `<top (required)>' 
    from /home/ronanlopes/.rvm/gems/ruby-2.3.1/gems/activesupport-5.0.0.1/lib/active_support/dependencies.rb:293:in `require' 
    from /home/ronanlopes/.rvm/gems/ruby-2.3.1/gems/activesupport-5.0.0.1/lib/active_support/dependencies.rb:293:in `block in require' 
    from /home/ronanlopes/.rvm/gems/ruby-2.3.1/gems/activesupport-5.0.0.1/lib/active_support/dependencies.rb:259:in `load_dependency' 
    from /home/ronanlopes/.rvm/gems/ruby-2.3.1/gems/activesupport-5.0.0.1/lib/active_support/dependencies.rb:293:in `require' 
    from /home/ronanlopes/HY Brazil/HyBrazil/bin/rails:9:in `<top (required)>' 
    from /home/ronanlopes/.rvm/gems/ruby-2.3.1/gems/activesupport-5.0.0.1/lib/active_support/dependencies.rb:287:in `load' 
    from /home/ronanlopes/.rvm/gems/ruby-2.3.1/gems/activesupport-5.0.0.1/lib/active_support/dependencies.rb:287:in `block in load' 
    from /home/ronanlopes/.rvm/gems/ruby-2.3.1/gems/activesupport-5.0.0.1/lib/active_support/dependencies.rb:259:in `load_dependency' 
    from /home/ronanlopes/.rvm/gems/ruby-2.3.1/gems/activesupport-5.0.0.1/lib/active_support/dependencies.rb:287:in `load' 
    from /home/ronanlopes/.rvm/rubies/ruby-2.3.1/lib/ruby/2.3.0/rubygems/core_ext/kernel_require.rb:55:in `require' 
    from /home/ronanlopes/.rvm/rubies/ruby-2.3.1/lib/ruby/2.3.0/rubygems/core_ext/kernel_require.rb:55:in `require' 
    from -e:1:in `<main>'

사용자 토큰 : 업로드 내가 첨부 파일 내 모델의 일부 인스턴스를 삭제하려고하면, 다음과 같은 설정, 그것은 삭제 요청을 보내고 반환 거부 된 액세스, 확인하고 완벽하게 작동하지만, 내 설정에 사용하는 경우 AmazonS3FullAccess - AWS Managed policy이 있으므로 나에게 의미가 없습니다. 어떤 아이디어?

출처

2016-12-21 Ronan Lopes

동일한 객체에 대해 동일한 자격 증명을 사용합니까? –

미안하지만, 어떻게 그리고 정확히 그 명령을 실행해야합니까? –

아직 설치하지 않은 경우 AWS CLI를 다운로드하여 설치하고 명령 줄에서 실행하십시오. https://aws.amazon.com/cli/ –

내가보기에 안개 보석의 bucket_name 변수를 'bucket-name'으로 설정하거나 여기에 게시하도록 편집했습니다. 귀하의 config/initializer/carrierwave.rb은 .env 파일에있는 사람들을 확인, 당신은 mannually으로 설정에도 ENV['S3_BUCKET_NAME'] 또는 ENV['S3_ASSET_URL'] 변수 잘못, 또는 설정 될 수도 있습니다

CarrierWave.configure do |config| 
     config.fog_credentials = { 
     # Configuration for Amazon S3 should be made available through an Environment variable. 
     # For local installations, export the env variable through the shell OR 
     # if using Passenger, set an Apache environment variable. 
     # 
     # In Heroku, follow http://devcenter.heroku.com/articles/config-vars 
     # 
     # $ heroku config:add S3_KEY=your_s3_access_key S3_SECRET=your_s3_secret S3_REGION=eu-west-1 S3_ASSET_URL=http://assets.example.com/ S3_BUCKET_NAME=s3_bucket/folder 

     # Configuration for Amazon S3 
     :provider    => 'AWS', 
     :aws_access_key_id  => ENV['S3_KEY'], 
     :aws_secret_access_key => ENV['S3_SECRET'], 
     :region    => ENV['S3_REGION'] 
     } 

     # For testing, upload files to local `tmp` folder. 
     if Rails.env.test? || Rails.env.cucumber? 
     config.storage = :file 
     config.enable_processing = false 
     config.root = "#{Rails.root}/tmp" 
     else 
     config.storage = :fog 
     end 

     config.cache_dir = "#{Rails.root}/tmp/uploads"     # To let CarrierWave work on heroku 

     config.fog_directory = ENV['S3_BUCKET_NAME'] 
     config.s3_access_policy = :public_read       # Generate http:// urls. Defaults to :authenticated_read (https://) 
     config.fog_host   = "#{ENV['S3_ASSET_URL']}/#{ENV['S3_BUCKET_NAME']}" 
    end

처럼 보일 것이다 당신이`AWS S3 rm`를 호출 할 때 어떻게됩니까

출처

2016-12-23 15:18:46 ErvalhouS

안개 젬 - S3 파일 삭제시 액세스 거부

답변

관련 문제