[英]Uploading file to S3 using SSE
我试图将文件上传到s3存储桶,但出现“访问被拒绝”错误。 因此,使用aws cli进行检查-发现我们需要传递SSE kms密钥ID才能使其正常工作
带有以下条件的存储桶策略:s3:x-amz-server-side-encryption:aws:kms和s3:x-amz-server-side-encryption-aws-kms-key-id:key-id。 下面是我的代码,它仍然给Access错误。
有人可以帮忙吗?
public class FileUploadToAWSS3 {
private static final String SUFFIX = "/";
private static final String kms_cmk_id = "arn:aws:kms:";
public void uploadFileToS3Bucket(MultipartFile multipartFile) throws IOException {
AWSCredentials credentials = new BasicAWSCredentials(
"access_key",
"secret_key");
AmazonS3 s3client = new AmazonS3Client(credentials);
s3client.setEndpoint("https://s3.eu-west-1.amazonaws.com");
String bucketName = "my-bucket";
s3client.createBucket(bucketName);
String quarter1 = "root/Folder1";
createFolder(bucketName, quarter1, s3client);
String fileName = quarter1 + SUFFIX + multipartFile.getOriginalFilename();
ObjectMetadata omd = new ObjectMetadata();
omd.setContentType(multipartFile.getContentType());
omd.setContentLength(multipartFile.getSize());
omd.setHeader("filename", multipartFile.getOriginalFilename());
s3client.putObject(new PutObjectRequest(bucketName, fileName,multipartFile.getInputStream(), omd)
.withCannedAcl(CannedAccessControlList.Private)
.withSSEAwsKeyManagementParams(new SSEAwsKeyManagementParams(kms_cmk_id)));
}
private void createFolder(String bucketName, String folderName, AmazonS3 client) {
ObjectMetadata metadata = new ObjectMetadata();
metadata.setContentLength(0);
InputStream emptyContent = new ByteArrayInputStream(new byte[0]);
PutObjectRequest putObjectRequest = new PutObjectRequest(bucketName,
folderName + SUFFIX, emptyContent, metadata);
client.putObject(putObjectRequest);
}
}
只是更新解决方式:-
由于使用了S3存储桶的服务实例(通过Cloud Foundry提供),因此, 因此创建了存储桶,并且不需要特定的create bucket命令。
删除了代码s3client.createBucket(bucketName);
而且有效。
声明:本站的技术帖子网页,遵循CC BY-SA 4.0协议,如果您需要转载,请注明本站网址或者原文地址。任何问题请咨询:yoyou2525@163.com.