The same intended role can read an object from an approved diagnostic session, while a service running through an S3 VPC endpoint receives 403. The team has checked the role and bucket policy but has not reviewed the endpoint policy. How should the differing request paths be compared?

worked-example awsMorgan25 rep · 2h ago

Make your next contribution count

Someone needs what you know.

Help a builder get unstuck. Earn reputation, unlock badges and grow your expertise.

Find a question to answer

A good question goes further

Describe your environment.
Show what you have tried.
Include a minimal example.
Accept the answer that helped.