Users get Access Denied when attempting to connect to the S3 bucket using the Amazon S3 connector in MicroStrategy Web

Cloud Support Expert I • MicroStrategy

SYMPTOM:
When attempting to add external data using the “Amazon S3” connector in Strategy Web, users may get the following error after clicking on the data source, although correct IAM User’s AccessKey ID and AccessSecret have been provided and the following policies have been granted to the IAM user:
s3:GetObject
s3:ListBucket
Error: Cloud Connector REST service responded with an error status code.

DSSErrors log:
In the DSSErrors log, “Access Denied” and status code 403 can be observed:


RESTRequestWrapperImpl::Reply() The client has sent a request to the Intelligence Server but the
request has failed to being processed. [RequestID: 9], response body:
{"data":null,"error":{"code":403,"message":"Access Denied (Service: S3, Status Code:
403, Request ID: 9XSVHPWW9TJJD2XE, Extended Request ID:
JxeT5qJXb/QDyaNyUQmZsOuGqWqhDw8Usllb1Dm9LianNu2Mb2Zb6jUYP0f0LJB11tEaa38909JMwVex5vNkZQ==)"},"
iServerErrorCode":-1073283545,"message":"(Cloud Connector REST service responded with
an error status code)"}
, response code: 403.

cc-server.log (under “/MicroStrategy/CloudObjectConnector/log/”):
By checking the cc-server.log file, Strategy is attempting to access 's3a://', bucket ‘’ and path ‘’, and then return the Access Denied error.


21-10-27 22:44:07 DEBUG cc.cfs.impl.s3.S3Connector: Path [s3a://] -> CloudFilePath{fs='s3a://',
bucket='', path=''}
21-10-27 22:44:08 ERROR cc.cfs.impl.s3.S3Connector: Access Denied (Service: S3, Status
Code: 403, Request ID: 9XSVHPWW9TJJD2XE, Extended Request ID:
 JxeT5qJXb/QDyaNyUQmZsOuGqWqhDw8Usllb1Dm9LianNu2Mb2Zb6jUYP0f0LJB11tEaa38909JMwVex5vNkZQ==)

CAUSE
The cause of the problem is that the IAM user doesn’t have permission to see the list of S3 buckets.
ACTION:
Modify the IAM user in Amazon and grant the policy “s3:ListAllByBuckets” to the user.

Comment

0 comments

Details

Knowledge Article

Published:

January 11, 2022

Last Updated:

January 11, 2022

RESTRequestWrapperImpl::Reply() The client has sent a request to the Intelligence Server but the request has failed to being processed. [RequestID: 9], response body: {"data":null,"error":{"code":403,"message":"Access Denied (Service: S3, Status Code: 403, Request ID: 9XSVHPWW9TJJD2XE, Extended Request ID: JxeT5qJXb/QDyaNyUQmZsOuGqWqhDw8Usllb1Dm9LianNu2Mb2Zb6jUYP0f0LJB11tEaa38909JMwVex5vNkZQ==)"}," iServerErrorCode":-1073283545,"message":"(Cloud Connector REST service responded with an error status code)"} , response code: 403.

21-10-27 22:44:07 DEBUG cc.cfs.impl.s3.S3Connector: Path [s3a://] -> CloudFilePath{fs='s3a://', bucket='', path=''} 21-10-27 22:44:08 ERROR cc.cfs.impl.s3.S3Connector: Access Denied (Service: S3, Status Code: 403, Request ID: 9XSVHPWW9TJJD2XE, Extended Request ID: JxeT5qJXb/QDyaNyUQmZsOuGqWqhDw8Usllb1Dm9LianNu2Mb2Zb6jUYP0f0LJB11tEaa38909JMwVex5vNkZQ==)