steveloughran opened a new pull request #1619: HADOOP-16478. S3Guard 
bucket-info fails if the caller lacks s3:GetBucketLocation
URL: https://github.com/apache/hadoop/pull/1619
 
 
   
   
   -Catch and downgrade to info
   -add to javadocs
   -review all other uses
   -test in ITestAssumeRole; needs to open up a bit more of the tool for this.
   
   ----
   
   Tested s3 ireland. initially tested without the downgrade, to verify the 
test created the failure mode.
   
   It did:
   
   ```
   [ERROR] 
testBucketLocationForbidden(org.apache.hadoop.fs.s3a.auth.ITestAssumeRole)  
Time elapsed: 3.957 s  <<< ERROR!
   java.nio.file.AccessDeniedException: hwdev-steve-ireland-new: 
getBucketLocation() on hwdev-steve-ireland-new: 
com.amazonaws.services.s3.model.AmazonS3Exception: Access Denied (Service: 
Amazon S3; Status Code: 403; Error Code: AccessDenied;
        at 
org.apache.hadoop.fs.s3a.auth.ITestAssumeRole.testBucketLocationForbidden(ITestAssumeRole.java:754)
   Caused by: com.amazonaws.services.s3.model.AmazonS3Exception: Access Denied 
(Service: Amazon S3; Status Code: 403; Error Code: AccessDenied; 
        at 
org.apache.hadoop.fs.s3a.auth.ITestAssumeRole.testBucketLocationForbidden(ITestAssumeRole.java:754)
   ```
   
   With the handler in the bucket info tool, the test worked.

----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
us...@infra.apache.org


With regards,
Apache Git Services

---------------------------------------------------------------------
To unsubscribe, e-mail: common-issues-unsubscr...@hadoop.apache.org
For additional commands, e-mail: common-issues-h...@hadoop.apache.org

Reply via email to