You need to enable JavaScript to run this app.
优惠活动
大模型
产品
解决方案
定价
更多

S3临时URL突然无法访问(Laravel环境)求助排查

S3临时URL生成后返回“Access Denied”问题排查

我通过Laravel控制器生成S3存储文件的临时URL供用户临时访问,代码如下:

return Storage::disk('s3')->temporaryUrl('Reports/report_signed2.pdf', now()->addMinutes(1));

此前S3存储配置正常且功能可用,但近期生成的URL返回“Access Denied”(访问被拒绝)。我未修改过IAM策略,怀疑是否AWS S3安全规则更新导致需要调整存储桶或IAM设置?

我的IAM包含三个策略:

1. AmazonS3FullAccess

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": [
                "s3:*",
                "s3-object-lambda:*"
            ],
            "Resource": "*"
        }
    ]
}

2. iaminlinepolicy

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": [
                "s3:ListBucket",
                "s3:GetObject",
                "s3:DeleteObject",
                "s3:GetObjectAcl",
                "s3:PutObjectAcl",
                "s3:PutObject",
                "s3:GetAccessGrants"
            ],
            "Resource": [
                "arn:aws:s3:::hris-pangasinan",
                "arn:aws:s3:::hris-pangasinan/*"
            ]
        }
    ]
}

3. laravel-policy

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": [
                "s3:ListBucket",
                "s3:GetObject",
                "s3:DeleteObject",
                "s3:GetObjectAcl",
                "s3:PutObjectAcl",
                "s3:PutObject",
                "s3:GetAccessGrants"
            ],
            "Resource": [
                "arn:aws:s3:::hris-pangasinan",
                "arn:aws:s3:::hris-pangasinan/*"
            ]
        }
    ]
}

我已尝试排查但未解决问题,恳请协助。

内容的提问来源于stack exchange,提问作者Allan Posadas

相关产品推荐
方舟 Agent Plan

超全模态模型 × Harness 升级,最新支持 Deepseek-V4.1-Flash、GLM-5.3 系列、Doubao-Seedream-5.0-pro、Kimi-K3 (部分), 限时 9.9 元起

最近更新时间:2026.07.04 12:46:26