All Products
Search
Document Center

Object Storage Service:0003-00000005

Last Updated:Aug 30, 2025

Problem description

You do not have the read permissions on the object that you want to access, or the authentication information that you provided is invalid.

Causes

  • You do not have the read permissions on the object that you want to access.

  • The AccessKey ID or AccessKey secret that you provided is invalid.

Examples

The error is returned when you access a private object as an anonymous user or when you use an account to access a private object that is stored in a bucket that does not belong to your account.

For example, your request is also rejected if the Block Public Access feature is enabled for the bucket, even if the ACL of the bucket or object is set to public-read or public-read-write.

Solutions

  • Make sure that the AccessKey ID and AccessKey secret that you provide are valid.

  • If you use a RAM user or temporary access credentials that are obtained from Security Token Service (STS) to send an access request, make sure that the account that you use has the required permissions to perform the operation. For more information, see Tutorial: Use RAM policies to control access to OSS and Common examples of RAM policies.

  • If you set the ACL of a bucket or an object to public-read to allow anonymous access, check whether the Block Public Access feature is enabled for the bucket.

  • You can also sign an object to generate a signed URL, which allows other users to access the object.

  • If you are the owner of a bucket and you want to allow all other users, including anonymous users, to access an object in the bucket, you can set the ACL of the bucket or the object to public-read or public-read-write. If you set the ACL to public-read, all users can perform read operations on the bucket or the object. If you set the ACL to public-read-write, all users can perform read and write operations on the bucket or the object. This solution exposes your bucket or object to risks. We recommend that you do not use this solution. For more information, see Bucket ACL and Object ACL.