Unable to create an aws s3 bucket

Cloud AWS
,
#1

Hi Team,

I am getting below error while creating a standard aws s3 bucket using terraform via actions workflow.

Error: reading S3 Bucket (pk-terraform-bucket-6f3a2b7e9c6f3a2b7e9c) accelerate configuration: operation error S3: GetBucketAccelerateConfiguration, https response error StatusCode: 403, RequestID: 1SWNYYMFWAGTW2X9, HostID: LqPuSnu7tFaZQtPxpVCHV9frrUQOspG+kpZCEwIMHJozEah7GrSg9xsrx4OLs2/fkH82Ivu+xiU=, api error AccessDenied: User: arn:aws:iam::637423626013:user/kk_labs_user_504960 is not authorized to perform: s3:GetAccelerateConfiguration on resource: “arn:aws:s3:::pk-terraform-bucket-6f3a2b7e9c6f3a2b7e9c” with an explicit deny in a service control policy.

Terraform config:

resource “aws_s3_bucket” “pk_terraform_bucket” {
bucket = “pk-terraform-bucket-6f3a2b7e9c6f3a2b7e9c”
}

resource “aws_s3_bucket_versioning” “versioning_example” {
bucket = aws_s3_bucket.pk_terraform_bucket.id
versioning_configuration {
status = “Enabled”
}
}

Same approach was working fine till couple of weeks ago.

#2

First of all, let’s fix your HCL – please use code blocks to prevent your code from getting corrupted, as this was:

resource "aws_s3_bucket" "pk_terraform_bucket" {
  bucket = "pk-terraform-bucket-6f3a2b7e9c6f3a2b7e9c"
}

resource "aws_s3_bucket_versioning" "versioning_example" {
  bucket = aws_s3_bucket.pk_terraform_bucket.id
  versioning_configuration {
    status = "Enabled"
  }
}

Once fixed, I can confirm that your HCL is syntactically valid, and I also confirm that I also get your error in the live AWS terraform playground. I’ve reported this to our playground team, who will tell me why versioning is not allowed due to your rather obscure permission error.

1 Like
#3

Thanks for reporting this. This should now be fixed.

1 Like
#4

I am able to create a bucket now. Thanks for checking.