If the "Request denied by instance ACL policies" exception occurs when you use a Tablestore SDK to access resources in a Tablestore instance, check the network access control list (ACL) configurations of the instance and make sure that the type of the network that your client uses to access resources in the instance is allowed by the instance.
Problem description
When I use a Tablestore SDK to access resources in a Tablestore instance, the "Request denied by instance ACL policies" exception occurs. Sample error:
[ErrorCode]:OTSAuthFailed, [Message]:Request denied by instance ACL policies., [RequestId]:XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX, [TraceId]:XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX, [HttpStatus:]403Possible cause
The type of the network that your client uses to access resources in the Tablestore instance is not allowed by the instance. For example, your client uses the Internet to access resources in the Tablestore instance. However, the instance does not allow access over the Internet.
Solution
Check the network ACL configurations of the Tablestore instance in the Tablestore console and modify the configurations to allow the type of the network that your client uses to access resources in the instance. For more information, see Network ACL.
By default, Internet access is disabled for an instance. You can manually enable Internet access for an instance.
Go to the Network Management tab.
Log on to the Tablestore console.
In the upper part of the Overview page, select a resource group and a region.
Click the name of the instance that you want to manage or click Manage Instance in the Actions column of the instance.
On the Instance Management page, click the Network Management tab.
In the Network Access Control section of the Network Management tab, select the type of the network that your client uses next to Allowed Network Type.
Click Settings.
Complete the verification as prompted to complete the settings.