本文為您介紹JindoSDK訪問OSS出現AccessDenied問題的原因和解決方案。
問題詳情
Failed test connectivity, operation: getFileStatus, errMsg: [RequestId]: 635B6DDE9A1F093434AC6A7C [HostId]: oss-cn-beijing-internal.aliyuncs.com [ErrorMessage]: [E1010]HTTP/1.1 403 Forbidden: <?xml version="1.0" encoding="UTF-8"?><Error> <Code>AccessDenied</Code> <Message>The bucket you access does not belong to you.</Message> <RequestId>635B6DDE9A1F093434AC6A7C</RequestId> <HostId>xxx.oss-cn-beijing-internal.aliyuncs.com</HostId></Error> [ErrorCode]: 1010 [RequestId]: 635B6DDE9A1F093434AC6A7C
問題原因
RAM使用者未被授權相關許可權。
解決方案
授權RAM使用者相關許可權，授權方法請參見通過RAM對OSS進行許可權管理。
如果您需要通過Action做精細化控制，可參考如下樣本。
- JindoSDK讀寫OSS
# Bucket層級 oss:ListObjects oss:GetBucketInfo # Object層級 oss:PutObject oss:GetObject oss:DeleteObject oss:AbortMultipartUpload oss:ListParts oss:RestoreObject oss:PutObjectTagging oss:GetObjectTagging oss:DeleteObjectTagging #多版本 oss:ListObjectVersions oss:GetObjectVersion oss:DeleteObjectVersion oss:RestoreObjectVersion oss:PutObjectVersionTagging oss:GetObjectVersionTagging oss:DeleteObjectVersionTagging - JindoSDK唯讀OSS
# Bucket層級 oss:ListObjects oss:GetBucketInfo # Object層級 oss:GetObject oss:ListParts oss:RestoreObject oss:GetObjectTagging #多版本 oss:ListObjectVersions oss:GetObjectVersion oss:RestoreObjectVersion oss:GetObjectVersionTagging