Amazon web services FileNotFoundException：没有这样的文件或目录'；s3

我正在尝试获取存储在我的S3 bucket

mbop devo

帐户中的Nexus数据。nexus服务写入数据的S3存储桶位于

mbop devo

帐户中。桶策略粘贴在下面

现在我想把数据放到我自己AWS帐户中的另一个S3存储桶中

korgak

。在

korgak

账户内，我担任了nexus的角色。当我尝试在输出中执行SQL查询时，它将返回我的nexus数据名。但在运行select查询时，其给出错误：

原因：java.io.FileNotFoundException:没有此类文件或目录's3://mbop na prepod nexus/mbopccustomerdata/00242/2018-12-28T041/PT1M/a403dc78-aded-46c9-b424-1834456438d.gz'

文件存在于S3存储桶中，我不确定权限缺失的位置

S3桶策略：

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "NexusSystemPermissions",
            "Effect": "Allow",
            "Principal": {
                "AWS": "arn:aws:iam::255137427906:role/EmrEc2Instance"
            },
            "Action": [
                "s3:PutObject",
                "s3:PutObjectAcl",
                "s3:List*"
            ],
            "Resource": [
                "arn:aws:s3:::mbop-na-preprod-nexus/*",
                "arn:aws:s3:::mbop-na-preprod-nexus"
            ]
        },
        {
            "Sid": "CrossAccountPermissions1",
            "Effect": "Allow",
            "Principal": {
                "AWS": "arn:aws:iam::255137427906:root"
            },
            "Action": "s3:*",
            "Resource": [
                "arn:aws:s3:::mbop-na-preprod-nexus"
            ]
        },
        {
            "Sid": "CrossAccountPermissions2",
            "Effect": "Allow",
            "Principal": {
                "AWS": "arn:aws:iam::997380610533:root"
            },
            "Action": "s3:*",
            "Resource": [
                "arn:aws:s3:::mbop-na-preprod-nexus"
            ]
        },
        {
            "Sid": "CrossAccountPermissions3",
            "Effect": "Allow",
            "Principal": {
                "AWS": "arn:aws:iam::997380610533:root"
            },
            "Action": "s3:*",
            "Resource": [
                "arn:aws:s3:::mbop-na-preprod-nexus/*"
            ]
        },
        {
            "Sid": "CrossAccountPermissions4",
            "Effect": "Allow",
            "Principal": {
                "AWS": "arn:aws:iam::255137427906:root"
            },
            "Action": "s3:*",
            "Resource": [
                "arn:aws:s3:::mbop-na-preprod-nexus/*"
            ]
        }
    ]
}

---

如果错误消息中提到的对象存在，则这是权限问题。您用于访问存储桶的“nexus角色”的ARN是哪个？另外，分配给“nexus角色”的权限是什么？（请随意编辑您的问题以添加更多详细信息，也可以删除不相关的详细信息。）NexusRole ARN-ARN:aws:iam:：997380610533:根NexusRole已承担角色策略-`{“版本”：“2012-10-17”，“语句”：[{“Sid”：“Stmt1457993729000”，“效果”：“允许”，“操作”：[“sts:AssumeRole”]，“Resource”：“arn:aws:iam:：255137427906:role/NexusClient mbop度量”}]}`arn:aws:iam:：255137427906:role/NexusClient mbop metrics是Nexus赋予我们的角色。我已经让AmazonS3完全访问Nexus role如果您尝试通过aws CLI访问它会发生什么？您可以将角色添加到aws CLI配置中，然后只需尝试

aws s3 ls s3://mbop na prepod Nexus/mbopcCustomerData/00242/2018-12-2880041/P即可T1M/a403dc78-aded-46c9-b424-1834456438D.gz

我在aws/credentials文件[mbop us access Prepod]role\u arn=arn:aws:iam:：997380610533:role/NexusRole source\u profile=korgak[mbop nexus profile]role\u arn=arn:aws:iam:：255137427906:role/nexcusclient mbop metrics source\u profile=mbop us access Prepod