403 The video url could not be accessed, please check you have the correct permission set within S3Bubble

  • Posted on Saturday, June 10, 2017

Hi All,

This is quite a common error that confuses some people the main issue is when users switches to a Cloudfront setup and they have not updated their bucket policy.

If your bucket is not setup with Cloudfront then your bucket policy will look something like this.


{
  "Version": "2008-10-17",
  "Id": "S3BubbleSecurity",
  "Statement": [
    {
      "Sid": "S3BubbleAllow",
      "Effect": "Allow",
      "Principal": {
        "AWS": "*"
      },
      "Action": "s3:GetObject",
      "Resource": "arn:aws:s3:::bucketname/*",
      "Condition": {
        "StringLike": {
          "aws:Referer": [
            "https://s3bubble.com/*",
            "https://media.s3bubble.com/*"
          ]
        }
      }
    }
  ]
}

If you are using Cloudfront on this bucket then you will get a permission denied error. A Cloudfront bucket policy looks like this.


{
  "Version": "2008-10-17",
  "Id": "S3BubbleCloudfrontSecurity",
  "Statement": [
    {
      "Sid": "S3BubbleAllow",
      "Effect": "Allow",
      "Principal": {
        "AWS": "arn:aws:iam::cloudfront:user/CloudFront Origin Access Identity E2D99SZTA0Z6XO"
      },
      "Action": "s3:GetObject",
      "Resource": "arn:aws:s3:::bucketname/*"
    }
  ]
}

To update you bucket police go to your CloudFront distributions.
https://s3bubble.com/secure/#/cloudfront

Find the distribution that is attached to your bucket and then select update bucket policy and you should be good to go.

If you use Cloudfront the bucket must have this policy set to allow them to talk to each other,

Best Regards

S3Bubble Team

Distributing millions of videos
every month via Wordpress

S3Bubble is a SAAS platform for media streaming via Wordpress designed to help all your media streaming needs

Free Trial