Problem description
Your request is denied by the bucket policy.
Causes
The bucket or object access request matches a Deny rule specified in the bucket policy.
Examples
For example, the error is returned if you initiate a request to access an object in a bucket that has the following bucket policy, from a virtual private cloud (VPC) whose VPC ID is not t4nlw426y44rd3iq4xxxx:
{
"Version": "1",
"Statement": [
{
"Effect": "Deny",
"Action": [
"oss:GetObject"
],
"Principal": [
"*"
],
"Resource": [
"acs:oss:*:174649585760xxxx:examplebucket/*"
],
"Condition": {
"StringNotEquals": {
"acs:SourceVpc": [
"vpc-t4nlw426y44rd3iq4xxxx"
]
}
}
}
]
}The bucket policy denies the request to access objects in the bucket from VPCs that meet the specified condition.
Solutions
Check whether the request that you initiate matches a Deny rule of the bucket policy. For more information, see Bucket policies and Examples.