S3 Sync cross account failing due to AccessDenied error

Issue:

When doing cross account S3 sync, it fails due to missing permissions on the bucket

copy failed: s3://mybucketname//file_name.txt to s3://other_bcuket//file_name.txt An error occurred (AccessDenied) when calling the CopyObject operation: Access Denied

Solution:

sync is performed using the account configured for the relevant N2WS policy and that account needs to be able to access both buckets

This can be done using ACL or buckets policy, for example: 

1 - Make sure that the entire account or specific role are allowed to access.

2 - Make sure that access is provided to the bucket and to the entire bucket content (using *)

• Related Articles

• Knowledge Base Article: Resolving Access Denied Error in N2WS S3 Sync

  Issue When attempting to copy an object between S3 buckets using AWS KMS for encryption, you encounter the following error: copy failed: s3://atestbucket2022-with-kms/CPM Configurations.pdf to s3://s3sync-cross-account-destination-with-kms/CPM ...

• Cross-Account Cross-Region Recovery in N2WS

  Overview This article explains the cross-account cross-region recovery process in N2WS and addresses why the “Restore to Region” drop-down menu might be greyed out. Understanding the “Restore to Region” Drop-Down Menu Why is the “Restore to Region” ...

• Cross-Region DR RDS backup may fail with "Copy failed due to an AWS limitation regarding default encryption key” error

  RDS DR backup of encrypted snapshots between different regions may fail with the following error in the Backup log: Error - RDS DR, copy snapshot failed (to DR account) due to an AWS limitation regarding default encryption key (source US East (Ohio), ...

• Cross region copy of RDS snapshots may fail with error: RDS DR copy snapshot failed (in Backup account). No matching KMS alias in target region

  Issue: The Following error may appear in the CPM Server logs: ERROR: start_copy_region(dr_rds.py:301) RDS DR copy snapshot failed (in Backup account). No matching KMS alias on target region (source EU (Frankfurt), target Asia Pacific (Singapore), RDS ...

• How to backup EC2 instance located in another account

  Background: You can backup ec2 instances that are located in a different account then the N2WS server, This Guide shows the needed configuration for this AWS Configuration You need to create a role in the target account IAM that has the following: 1. ...