How to Check Detailed Error Information When Moving S3 Objects

If you encounter an error while moving objects in the S3 console and are unsure of the details, you may be able to find more information by examining a HAR file.

Problem Overview

While attempting to move an object in the S3 console, you received an error message stating, "Access Denied." It seems likely that there are insufficient permissions, but how can you determine which specific permissions are lacking?

How to Address This Issue

To investigate the error further, you can obtain a HAR file and review its contents for detailed error messages. Below is an excerpt from the relevant section of the HAR file:

"content": {
  "size": 465,
  "mimeType": "application/xml",
  "compression": -12,
  "text": "<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<Error><Code>AccessDenied</Code><Message>User: arn:aws:iam::000000000000:user/s3operationtest is not authorized to perform: s3:GetObjectAcl on resource: \"arn:aws:s3:::check-error-detail-test/folder1/file1.txt\" because no identity-based policy allows the s3:GetObjectAcl action</Message><RequestId>XXXXX</RequestId><HostId>XXXXXXXXXXXXXXX</HostId></Error>"
}

In this case, the error message indicates that the user performing the operation lacks permission for s3:GetObjectAcl.

For instructions on how to obtain a HAR file, please refer to the following blog post.

Reference

• How to Obtain a HAR File | DevelopersIO

By following these steps, you can gain insights into the specific permissions that are causing access issues when moving objects in Amazon S3. For more detailed information and additional context, you can refer to the original post here.