# S3 input: Unable to list objects. Access Denied

**URL:** <https://discuss.elastic.co/t/s3-input-unable-to-list-objects-access-denied/302380>\
**Category:** Logstash\
**Created:** [April 14, 2022, 12:48am UTC](https://discuss.elastic.co/t/s3-input-unable-to-list-objects-access-denied/302380 "2022-04-14T00:48:20Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![elker](https://avatars.discourse-cdn.com/v4/letter/e/ed8c4c/32.png) [@elker](https://discuss.elastic.co/u/elker)\
**Post date:** [April 14, 2022, 12:48am UTC](https://discuss.elastic.co/t/s3-input-unable-to-list-objects-access-denied/302380/1 "2022-04-14T00:48:20Z")

</div>

I am using the s3 input plugin to use assume a role using an aws\_access\_key/secret key and read from a bucket using a date based key.

The Logstash role allows AssumeRole, and the bucket allows the role to ListBucket and GetObjects. For some reason, there is an Access Denied each time this runs.

Any ideas why or how I can debug it further?

---

<div class="post-metadata">

**Author:** ![elker](https://avatars.discourse-cdn.com/v4/letter/e/ed8c4c/32.png) [@elker](https://discuss.elastic.co/u/elker)\
**Post date:** [April 22, 2022, 3:01am UTC](https://discuss.elastic.co/t/s3-input-unable-to-list-objects-access-denied/302380/2 "2022-04-22T03:01:00Z")

</div>

Solution: Logstash did not have access to the S3 VPC endpoint.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [May 20, 2022, 3:01am UTC](https://discuss.elastic.co/t/s3-input-unable-to-list-objects-access-denied/302380/3 "2022-05-20T03:01:44Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.