本文為您介紹JindoSDK訪問OSS出現AccessDenied問題的原因和解決方法。
問題詳情
Failed test connectivity, operation: getFileStatus, errMsg: [RequestId]: 635B6DDE9A1F093434AC6A7C [HostId]: oss-cn-beijing-internal.aliyuncs.com [ErrorMessage]: [E1010]HTTP/1.1 403 Forbidden: <?xml version="1.0" encoding="UTF-8"?><Error> <Code>AccessDenied</Code> <Message>The bucket you access does not belong to you.</Message> <RequestId>635B6DDE9A1F093434AC6A7C</RequestId> <HostId>xxx.oss-cn-beijing-internal.aliyuncs.com</HostId></Error> [ErrorCode]: 1010 [RequestId]: 635B6DDE9A1F093434AC6A7C
問題原因
RAM用戶未被授權相關權限。
解決方法
授權RAM用戶相關權限，授權方法請參見通過RAM對OSS進行權限管理。
如果您需要通過Action做精細化控制，可參考如下示例。
- JindoSDK讀寫OSS
# Bucket級別 oss:ListObjects oss:GetBucketInfo # Object級別 oss:PutObject oss:GetObject oss:DeleteObject oss:AbortMultipartUpload oss:ListParts oss:RestoreObject oss:PutObjectTagging oss:GetObjectTagging oss:DeleteObjectTagging #多版本 oss:ListObjectVersions oss:GetObjectVersion oss:DeleteObjectVersion oss:RestoreObjectVersion oss:PutObjectVersionTagging oss:GetObjectVersionTagging oss:DeleteObjectVersionTagging - JindoSDK只讀OSS
# Bucket級別 oss:ListObjects oss:GetBucketInfo # Object級別 oss:GetObject oss:ListParts oss:RestoreObject oss:GetObjectTagging #多版本 oss:ListObjectVersions oss:GetObjectVersion oss:RestoreObjectVersion oss:GetObjectVersionTagging