Comments (4)
Hello,
I see the missunderstood here. The behaviour is "normal".
I will explain why:
- The backend is receiving a request for a folder listing
- The backend is trying to perform a bucket list and hitting a 403 error from IAM
- All errors coming from AWS client are managed as an Internal Server Error
- The Internal Server Error template is used to answer
The folder list template is used only when the listing is performed with success.
A solution to make it works is to change your policy to add the s3:ListBucket
action and you will have to create a new template for your 403 error. The default one you are trying to use have an error field as required parameter and this won't be present. You can copy paste the forbidden template without the ".Error" part.
Regards,
Oxyno-zeta
from s3-proxy.
Wouldn't it be possible to disable the listing functionality entirely? I think adding ListBucket
permissions isn't that great because the application shouldn't be able to perform this operation.
from s3-proxy.
Hello @j0nm1 ,
I'm afraid that no for the moment. The solution listed above is the required one to have it working like you expect.
Maybe in the future. By the way, if I make a "disable listing" flag, this will probably fallback on file stream which will respond with a 404 not found. Will this be ok ?
Edit: that will completely disable the index document feature
Regards,
from s3-proxy.
This issue is stale because it has been open 30 days with no activity. Remove stale label or comment or this will be closed in 10 days
from s3-proxy.
Related Issues (20)
- How to set authorizationAccesses HOT 3
- Use security-credentials endpoint for authentication? HOT 1
- How to operate s3-proxy behind a reverse http proxy? HOT 7
- How to use s3-proxy with AWS named profiles HOT 5
- PUT and DELETE operations not working HOT 3
- Question about config file parameters HOT 2
- Using s3cmd HOT 4
- Allow application/octet-stream HOT 1
- Sub bucket HOT 1
- Let the docker image build itself HOT 3
- Add support for filesystem as a target HOT 1
- Proxy pre-compressed data as-is HOT 13
- Provide a way to disable folder listing HOT 9
- Support PASETO authentication HOT 4
- OIDC: no resource declared message when it is HOT 8
- Signed URL for PUT requests HOT 10
- Assume role failing via WebIdentity HOT 4
- Uploading large objects using multipart HOT 2
- [oidc] JWT auth failures respond with HTTP 500 instead of 401 HOT 2
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from s3-proxy.