[ https://issues.apache.org/jira/browse/HADOOP-14531?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16180726#comment-16180726 ]
Steve Loughran commented on HADOOP-14531: ----------------------------------------- Bucket exists, but doesn't grant access (FWIW, it's a bucket of mine since ~2010, just on a personal a/c}: Result {{AccessDeniedException}} {code} bin/hadoop s3guard bucket-info s3a://stevel 2017-09-26 14:00:33,944 INFO Configuration.deprecation: fs.s3a.server-side-encryption-key is deprecated. Instead, use fs.s3a.server-side-encryption.key Filesystem s3a://stevel 2017-09-26 14:00:34,132 INFO s3a.S3ALambda: getBucketLocation() on stevel: java.nio.file.AccessDeniedException: stevel: getBucketLocation() on stevel: com.amazonaws.services.s3.model.AmazonS3Exception: Access Denied (Service: Amazon S3; Status Code: 403; Error Code: AccessDenied; Request ID: 3AF0ECF22A60DD1D; S3 Extended Request ID: 1ljfM4kRdqobBBDKMVbRqeguhfn4vTH3uPjhNiU0VR5+GdP8ArUB89Qp3XY5gjUajeBwo2YUJLk=), S3 Extended Request ID: 1ljfM4kRdqobBBDKMVbRqeguhfn4vTH3uPjhNiU0VR5+GdP8ArUB89Qp3XY5gjUajeBwo2YUJLk=:AccessDenied 2017-09-26 14:00:34,133 WARN s3a.S3ALambda: getBucketLocation() on stevel failing after 1 attempts: java.nio.file.AccessDeniedException: stevel: getBucketLocation() on stevel: com.amazonaws.services.s3.model.AmazonS3Exception: Access Denied (Service: Amazon S3; Status Code: 403; Error Code: AccessDenied; Request ID: 3AF0ECF22A60DD1D; S3 Extended Request ID: 1ljfM4kRdqobBBDKMVbRqeguhfn4vTH3uPjhNiU0VR5+GdP8ArUB89Qp3XY5gjUajeBwo2YUJLk=), S3 Extended Request ID: 1ljfM4kRdqobBBDKMVbRqeguhfn4vTH3uPjhNiU0VR5+GdP8ArUB89Qp3XY5gjUajeBwo2YUJLk=:AccessDenied java.nio.file.AccessDeniedException: stevel: getBucketLocation() on stevel: com.amazonaws.services.s3.model.AmazonS3Exception: Access Denied (Service: Amazon S3; Status Code: 403; Error Code: AccessDenied; Request ID: 3AF0ECF22A60DD1D; S3 Extended Request ID: 1ljfM4kRdqobBBDKMVbRqeguhfn4vTH3uPjhNiU0VR5+GdP8ArUB89Qp3XY5gjUajeBwo2YUJLk=), S3 Extended Request ID: 1ljfM4kRdqobBBDKMVbRqeguhfn4vTH3uPjhNiU0VR5+GdP8ArUB89Qp3XY5gjUajeBwo2YUJLk=:AccessDenied at org.apache.hadoop.fs.s3a.S3AUtils.translateException(S3AUtils.java:205) at org.apache.hadoop.fs.s3a.S3ALambda.once(S3ALambda.java:122) at org.apache.hadoop.fs.s3a.S3ALambda.lambda$retry$2(S3ALambda.java:233) at org.apache.hadoop.fs.s3a.S3ALambda.retryUntranslated(S3ALambda.java:288) at org.apache.hadoop.fs.s3a.S3ALambda.retry(S3ALambda.java:228) at org.apache.hadoop.fs.s3a.S3ALambda.retry(S3ALambda.java:203) at org.apache.hadoop.fs.s3a.S3AFileSystem.getBucketLocation(S3AFileSystem.java:513) at org.apache.hadoop.fs.s3a.S3AFileSystem.getBucketLocation(S3AFileSystem.java:501) at org.apache.hadoop.fs.s3a.s3guard.S3GuardTool$BucketInfo.run(S3GuardTool.java:1004) at org.apache.hadoop.fs.s3a.s3guard.S3GuardTool.run(S3GuardTool.java:309) at org.apache.hadoop.util.ToolRunner.run(ToolRunner.java:76) at org.apache.hadoop.fs.s3a.s3guard.S3GuardTool.run(S3GuardTool.java:1218) at org.apache.hadoop.fs.s3a.s3guard.S3GuardTool.main(S3GuardTool.java:1227) Caused by: com.amazonaws.services.s3.model.AmazonS3Exception: Access Denied (Service: Amazon S3; Status Code: 403; Error Code: AccessDenied; Request ID: 3AF0ECF22A60DD1D; S3 Extended Request ID: 1ljfM4kRdqobBBDKMVbRqeguhfn4vTH3uPjhNiU0VR5+GdP8ArUB89Qp3XY5gjUajeBwo2YUJLk=), S3 Extended Request ID: 1ljfM4kRdqobBBDKMVbRqeguhfn4vTH3uPjhNiU0VR5+GdP8ArUB89Qp3XY5gjUajeBwo2YUJLk= at com.amazonaws.http.AmazonHttpClient$RequestExecutor.handleErrorResponse(AmazonHttpClient.java:1638) at com.amazonaws.http.AmazonHttpClient$RequestExecutor.executeOneRequest(AmazonHttpClient.java:1303) at com.amazonaws.http.AmazonHttpClient$RequestExecutor.executeHelper(AmazonHttpClient.java:1055) at com.amazonaws.http.AmazonHttpClient$RequestExecutor.doExecute(AmazonHttpClient.java:743) at com.amazonaws.http.AmazonHttpClient$RequestExecutor.executeWithTimer(AmazonHttpClient.java:717) at com.amazonaws.http.AmazonHttpClient$RequestExecutor.execute(AmazonHttpClient.java:699) at com.amazonaws.http.AmazonHttpClient$RequestExecutor.access$500(AmazonHttpClient.java:667) at com.amazonaws.http.AmazonHttpClient$RequestExecutionBuilderImpl.execute(AmazonHttpClient.java:649) at com.amazonaws.http.AmazonHttpClient.execute(AmazonHttpClient.java:513) at com.amazonaws.services.s3.AmazonS3Client.invoke(AmazonS3Client.java:4229) at com.amazonaws.services.s3.AmazonS3Client.invoke(AmazonS3Client.java:4176) at com.amazonaws.services.s3.AmazonS3Client.invoke(AmazonS3Client.java:4170) at com.amazonaws.services.s3.AmazonS3Client.getBucketLocation(AmazonS3Client.java:938) at com.amazonaws.services.s3.AmazonS3Client.getBucketLocation(AmazonS3Client.java:944) at org.apache.hadoop.fs.s3a.S3AFileSystem.lambda$getBucketLocation$3(S3AFileSystem.java:516) at org.apache.hadoop.fs.s3a.S3ALambda.once(S3ALambda.java:120) ... 11 more 2017-09-26 14:00:34,136 INFO util.ExitUtil: Exiting with status -1: java.nio.file.AccessDeniedException: stevel: getBucketLocation() on stevel: com.amazonaws.services.s3.model.AmazonS3Exception: Access Denied (Service: Amazon S3; Status Code: 403; Error Code: AccessDenied; Request ID: 3AF0ECF22A60DD1D; S3 Extended Request ID: 1ljfM4kRdqobBBDKMVbRqeguhfn4vTH3uPjhNiU0VR5+GdP8ArUB89Qp3XY5gjUajeBwo2YUJLk=), S3 Extended Request ID: 1ljfM4kRdqobBBDKMVbRqeguhfn4vTH3uPjhNiU0VR5+GdP8ArUB89Qp3XY5gjUajeBwo2YUJLk=:AccessDenied {code} > Improve S3A error handling & reporting > -------------------------------------- > > Key: HADOOP-14531 > URL: https://issues.apache.org/jira/browse/HADOOP-14531 > Project: Hadoop Common > Issue Type: Improvement > Components: fs/s3 > Affects Versions: 2.8.1 > Reporter: Steve Loughran > Assignee: Steve Loughran > Priority: Blocker > > Improve S3a error handling and reporting > this includes > # looking at error codes and translating to more specific exceptions > # better retry logic where present > # adding retry logic where not present > # more diagnostics in exceptions > # docs > Overall goals > * things that can be retried and will go away are retried for a bit > * things that don't go away when retried failfast (302, no auth, unknown > host, connection refused) > * meaningful exceptions are built in translate exception > * diagnostics are included, where possible > * our troubleshooting docs are expanded with new failures we encounter > AWS S3 error codes: > http://docs.aws.amazon.com/AmazonS3/latest/API/ErrorResponses.html -- This message was sent by Atlassian JIRA (v6.4.14#64029) --------------------------------------------------------------------- To unsubscribe, e-mail: common-issues-unsubscr...@hadoop.apache.org For additional commands, e-mail: common-issues-h...@hadoop.apache.org