amazon s3 - Cloudfront - cannot invalidate objects that used to return 403 -
the setting
i have amazon cloudfront distribution set secured. objects in distribution required url signing. example, valid url used of following format:
the distribution points s3 bucket used secured (it allowed access through cloudfront).
what happened
at point, url singing expired , return 403.
since no longer need keep same security level, changed setting of cloudfront distribution , of s3 bucket pointing to, both public.
i tried invalidate objects in distribution. invalidation did not throw errors, invalidation did not seem succeed. requests same cloudfront url (with or without query string) still return 403.
the response header looks like:
http/1.1 403 forbidden server: cloudfront date: mon, 18 aug 2014 15:16:08 gmt content-type: text/xml content-length: 110 connection: keep-alive x-cache: error cloudfront via: 1.1 3abf650c7bf73e47515000bddf3f04a0.cloudfront.net (cloudfront) x-amz-cf-id: j1cszsxz0do-ixfvhwyqkdsdo462lwkfly0murdrulu7zt_w4huz2b==
things tried
i tried set cloudfront distribution points same s3 origin server. requests same object in new distribution successful.
the question
did encounter same situation cloudfront url returns 403 cannot invalidated? there reason why wouldn't object invalidated?
thanks help!
- first check invalidation not in progress. if wait till completed.
- if accessing s3 object through cloudfront using public url need have public read permission on s3 object.
- if trying access s3 object through cloudfront using signed url make sure time mention while generating sign url, must greater current time.
Comments
Post a Comment