How do I troubleshoot failed log shipping from Simple Log Service to OSS? -

Problem description

A task that ships logs from Simple Log Service to Object Storage Service (OSS) fails with an error:

Scenario 1:

AccessDenied: The bucket you are attempting to access must be addressed using the specified endpoint. Please send all future requests to this endpoint.

Scenario 2:

EntityNotExist.Role: The role not exists:

Causes

Scenario 1: The error message is returned because the OSS bucket and the Simple Log Service project are not located in the same region.
Scenario 2: The error message is returned because the Alibaba Cloud Resource Name (ARN) of the specified role is invalid.

Solutions

Note

Before you perform high-risk operations, such as modifying the configurations or data of Alibaba Cloud instances, we recommend that you check the disaster recovery and fault tolerance capabilities of the instances to ensure data security.
Before you modify the configurations or data of an instance, such as an Elastic Compute Service (ECS) instance or an ApsaraDB RDS instance, we recommend that you create snapshots or enable backup for the instance. For example, you can enable log backup for an ApsaraDB RDS instance.
If you granted the permissions on sensitive information such as usernames and passwords or submitted sensitive information in the Alibaba Cloud Management Console, we recommend that you modify the sensitive information at the earliest opportunity.

Scenario 1
Use a bucket that is in the same region as the Simple Log Service project.
Scenario 2
1. Go to the Cloud Resource Access Authorization page and click Confirm Authorization Policy.
2. On the Roles page of the RAM console, click AliyunLogDefaultRole that was created to obtain the ARN.

Applicable scope

OSS
Simple Log Service