Problem description
A 403 error is returned when you read, upload, or download objects from an OSS bucket configured with server-side encryption using a Key Management Service (KMS)-managed key (SSE-KMS). A risk control rule is blocking access to the bucket.
Causes
OSS relies on KMS to encrypt and decrypt objects. When a risk control rule restricts access to an OSS bucket that uses SSE-KMS encryption, HTTP 403 is returned for any operation that requires the KMS key: reads, uploads, and downloads.
Examples
You upload an object to an SSE-KMS bucket and receive a 403 error. The error occurs when a risk control rule restricts your access to the bucket.
Solutions
Contact KMS technical support to identify and resolve the risk control restriction.
References
该文章对您有帮助吗？