amplify storage returns 403

Describe the bug Retrieving images using amplify-s3-image returns 403 forbidden.

I have no issue adding to s3 bucket via amplify-s3-image-picker retrieving throws a 403. I’ve tried adding files to public folder directly and trying to retrieve, returns 403 .

To Reproduce Steps to reproduce the behavior:

1. setup auth amplify add auth
2. setup api amplify add api
3. setup storage amplify add storage -> auth users can create -> unauth/guest users can read.

Expected behavior display the image on app

Code Snippet

                <div class="my-8">
                  <amplify-s3-image-picker
                    button-text="yes"
                    header-title="Campaign Photo"
                    track="true"
                    :path="imgpath"
                  ></amplify-s3-image-picker>
                </div>
                <div>
                  <amplify-s3-image level="public" track="true" img-key="ball.png" />  //image uploaded directly to /public
                </div>

What is Configured? If applicable, please provide what is configured for Amplify CLI:

• Which steps did you follow via Amplify CLI when configuring your resources.
• Which resources do you have configured?
  • If applicable, please provide your aws-exports file:

  const awsmobile = {
      "aws_project_region": "us-east-1",
      "aws_cognito_identity_pool_id": "us-east-1:xxx-xxxx-xxxx-xxxx-xxxxxxxx",
      "aws_cognito_region": "us-east-1",
      "aws_user_pools_id": "us-east-1_xxx",
      "aws_user_pools_web_client_id": "xxxx",
      "oauth": {}
     "aws_appsync_graphqlEndpoint": "xx",
   "aws_appsync_region": "us-east-1",
   "aws_appsync_authenticationType": "AMAZON_COGNITO_USER_POOLS",
   "aws_user_files_s3_bucket": "xx",
   "aws_user_files_s3_bucket_region": "us-east-1"
  };
  

[ashika01]

Right here,

   "selectedGuestPermissions": [
        "s3:GetObject",
        "s3:ListBucket"
    ],
    "selectedAuthenticatedPermissions": [
        "s3:PutObject"
    ],

So in theselectedAuthenticatedPermissions, it says you have only given put permission. Can you try updating the storage to give get permissions there,

try amplify update storage and make sure to select both get and put for auth users. And lets see if that does the job.

[ShehryarKh]

@ashika01 Thank you. That was the issue. I’m not sure why it got set up that way. I got it to work by upgrading the storage to those permissions. Closing Issue.