AWS Lambda - Access Denied Error - GetObject

I am a newbie to AWS Lambda. I am trying out the Tutorial from https://docs.aws.amazon.com/lambda/latest/dg/with-s3-example.html. When the user uploads a jpg to a S3 bucket called greetingsproject, the lambda function is triggered.

Error: 9a62ff86-3e24-491d-852e-ded2e2cf5d94
INFO: error while getting object = AccessDenied: Access Denied

I am getting the Access denied error in the following code snippet:

try {          console.log("srcBucket=" + srcBucket);          console.log("srcKey=" + srcKey);          const params = {              Bucket: srcBucket,              Key: srcKey          };          var origimage = await s3.getObject(params).promise();        } catch (error) {          console.log("error while getting object = " + error);          return;      }    

My Policy for the Role:

{      "Version": "2012-10-17",      "Statement": [          {              "Effect": "Allow",              "Action": [                  "logs:PutLogEvents",                  "logs:CreateLogGroup",                  "logs:CreateLogStream"              ],              "Resource": "arn:aws:logs:*:*:*"          },          {              "Effect": "Allow",              "Action": "s3:ListAllMyBuckets",              "Resource": "arn:aws:s3:::*"          },          {              "Effect": "Allow",              "Action": [                  "s3:ListBucket",                  "s3:GetBucketLocation"              ],              "Resource": "arn:aws:s3:::greetingsproject"          },          {              "Effect": "Allow",              "Action": [                  "s3:GetObject"              ],              "Resource": [                  "arn:aws:s3:::greetingsproject",                  "arn:aws:s3:::greetingsproject/*"              ]          },          {              "Effect": "Allow",              "Action": [                  "s3:PutObject"              ],              "Resource": [                  "arn:aws:s3:::greetingsproject",                  "arn:aws:s3:::greetingsproject/*"              ]          }      ]  }  

Not sure what other permissions I need to add to the policy.

https://stackoverflow.com/questions/66896223/aws-lambda-access-denied-error-getobject April 01, 2021 at 06:41AM