s3 삭제 denied

Question

안녕하세요 작은 프로젝트로 파일 시스템을 관리 중인데요, S3를 이용해서 파일 업, 다운로드는 가능한데, 이상하게 삭제할때Access Denied (Service: Amazon S3; Status Code: 403; Error Code: AccessDenied; Request ID: 3QZD85JNQ59CJY6S; S3 Extended Request ID: i4mKx33tq0iMpkR76nmPrSKs7rTGIpfFKD7OLF7fvXlXDBRMsdvDIh8hwemF4ib&#43;sPgexHqmirI&#61;; Proxy: null)위와 같이 denied가 납니다.. 구글링해서 정책도 설정하고, 퍼블릭도 열고, cors도 설정하고 해봤습니다.. 근데 안되더라고요..우선 아래는 삭제관련 로직입니다.Delete controllerpackage OSSP.demo.controller; import OSSP.demo.service.file.FileDeleteService; import lombok.RequiredArgsConstructor; import org.springframework.http.ResponseEntity; import org.springframework.security.core.annotation.AuthenticationPrincipal; import org.springframework.web.bind.annotation.DeleteMapping; import org.springframework.web.bind.annotation.PathVariable; import org.springframework.web.bind.annotation.RestController; &#64;RestController &#64;RequiredArgsConstructor public class FileDeleteController { private final FileDeleteService fileDeleteService; &#64;DeleteMapping(&#34;/team/{teamId}/file/{fileId}&#34;) public ResponseEntity deleteAll(&#64;AuthenticationPrincipal String studentId, &#64;PathVariable Long fileId, &#64;PathVariable Long teamId){ return fileDeleteService.deleteAll(studentId, fileId, teamId); } &#64;DeleteMapping(&#34;/team/{teamId}/file/fileVersion/{fileVersionId}&#34;) public ResponseEntity deleteOne(&#64;AuthenticationPrincipal String studentId, &#64;PathVariable Long fileVersionId, &#64;PathVariable Long teamId){ return fileDeleteService.deleteOne(studentId, fileVersionId, teamId); } } delete servicepackage OSSP.demo.service.file; import OSSP.demo.entity.Member; import OSSP.demo.entity.User; import OSSP.demo.model.ResponseDto; import OSSP.demo.repository.FileRepository; import OSSP.demo.repository.FileVersionRepository; import OSSP.demo.repository.MemberRepository; import OSSP.demo.repository.UserRepository; import com.amazonaws.services.s3.AmazonS3; import com.amazonaws.services.s3.AmazonS3Client; import com.amazonaws.services.s3.model.DeleteObjectRequest; import lombok.RequiredArgsConstructor; import lombok.extern.slf4j.Slf4j; import org.springframework.beans.factory.annotation.Value; import org.springframework.http.ResponseEntity; import org.springframework.stereotype.Service; import org.springframework.transaction.annotation.Transactional; import java.util.Collections; &#64;RequiredArgsConstructor &#64;Service &#64;Slf4j public class FileDeleteService { private final FileVersionRepository fileVersionRepository; private final FileRepository fileRepository; private final AmazonS3Client amazonS3Client; private final UserRepository userRepository; private final MemberRepository memberRepository; private final AmazonS3 amazonS3; &#64;Value(&#34;${cloud.aws.s3.bucket}&#34;) private String bucket; &#64;Transactional // 파일 전체 삭제(하위 버전도 같이 삭제) public ResponseEntity deleteAll(String studentId, Long fileId, Long teamId) { try { User user &#61; userRepository.findByStudentId(studentId).get(); Member member &#61; memberRepository.findByUserIdAndTeamId(user.getId(), teamId).orElse(null); if (member&#61;&#61;null){ return ResponseEntity.badRequest().body(ResponseDto.builder().error(Collections.singletonMap(&#34;delete_file&#34;, &#34;올바른 사용자가 아닙니다.&#34;)).build()); } String keyName &#61; fileRepository.findById(fileId).get().getTransFileName(); //keyName이 파일 이름 String deleteUrl &#61; fileRepository.findById(fileId).get().getS3FileUrl(); DeleteObjectRequest request &#61; new DeleteObjectRequest(bucket, keyName); log.info(&#34;info&#34;, request); amazonS3Client.deleteObject(request); fileRepository.deleteById(fileId); //db에서 삭제. return ResponseEntity.ok().body(Collections.singletonMap(&#34;delete_file_result&#34;, &#34;파일버전 전체 삭제를 성공했습니다.&#34;)); }catch (Exception e){ log.error(e.getMessage()); return ResponseEntity.badRequest().body(ResponseDto.builder().error(Collections.singletonMap(&#34;delete_file&#34;, &#34;파일 전체 삭제에 실패했습니다.&#34;)).build()); } }s3configpackage OSSP.demo; import com.amazonaws.auth.AWSStaticCredentialsProvider; import com.amazonaws.auth.BasicAWSCredentials; import com.amazonaws.services.s3.AmazonS3Client; import com.amazonaws.services.s3.AmazonS3ClientBuilder; import org.springframework.beans.factory.annotation.Value; import org.springframework.context.annotation.Bean; import org.springframework.context.annotation.Configuration; &#64;Configuration public class AmazonS3Config { &#64;Value(&#34;${cloud.aws.credentials.accessKey}&#34;) private String accessKey; &#64;Value(&#34;${cloud.aws.credentials.secretKey}&#34;) private String secretKey; &#64;Value(&#34;${cloud.aws.region.static}&#34;) private String region; &#64;Bean public AmazonS3Client amazonS3Client() { BasicAWSCredentials basicAWSCredentials &#61; new BasicAWSCredentials(accessKey, secretKey); return (AmazonS3Client) AmazonS3ClientBuilder .standard() .withCredentials(new AWSStaticCredentialsProvider(basicAWSCredentials)) .withRegion(region) .build(); } }yml에 secret key랑 access key, region 다 설정해줬습니다.현재 도커에서 프론트는 리액트 띄었고, 백은 스프링 띄어서 mysql이랑 redis랑 연결했습니다.다른건 다 잘되는데 파일 삭제만 안되네요..도커 로그입니다. 확인 한번 부탁드릴게요 맨 아랫줄에 denied 되는걸 볼 수 있습니다.위와 같이 삭제가 되지를 않습니다.. 한번만 도와주십쇼...현재 루트로 접근해서 하고 있습니다. 왜 안되는지 알고 싶어서 iam으로 하는것보다 루트로 해결하고 싶습니다.

s3 삭제 denied

0개의 답변

기술 목록