Troubleshooting for AWS S3¶

SSL: CERTIFICATE_VERIFY_FAILED Error in AWS CLI¶

Perform the follwoing steps to resolve the SSL: CERTIFICATE_VERIFY_FAILED error encountered while using the AWS CLI.

1. Install certifi for your operating system:
   • For Ubuntu:

     Bash
     1	pip3 install certifi

   • For macOS:

     Bash
     1	brew install certifi

2. Run the following command to locate the cacert.pem file.

   Bash
   1	python3 -m certifi

   This command will display the full path of the cacert.pem file. Copy this path for use in the following step.
3. Open the privacera_aws.sh file.

   Bash
   1	vi privacera_aws.sh

   • Locate the variable named PYTHON_DEFAULT_CACERT_FILE within the script.

     Bash
     1	PYTHON_DEFAULT_CACERT_FILE="<location>/cacert.pem

   • Update the variable value by replacing <location>/cacert.pem with the copied path to your cacert.pem file obtained in the preceding step.
4. Run the following command to disable the endpoint:

   Bash
   1	. ~/privacera_aws.sh --disable-endpoint

5. Subsequently, run the following command enable the endpoint:

   Bash
   1	. ~/privacera_aws.sh --enable-endpoint

6. Run AWS CLI commands.

Proxy Authentication Required error in AWS CLI¶

If you encounter the error An error occurred (407) when calling the ListObjectsV2 operation: Proxy Authentication Required or Unable to locate credentials, perform following steps:

1. Unset AWS_DEFAULT_PROFILE:
   • Ensure that the AWS_DEFAULT_PROFILE environment variable is unset. This can prevent conflicts with default AWS CLI profiles.
   • To unset the variable, use the following command:

     Bash
     1	unset AWS_DEFAULT_PROFILE

2. Additional Checks:
   • Permissions:
     • Verify that the necessary permissions are granted for the operation. Check the audits to see if permission was denied. If so, create the required policy to grant access.
   • Privacera Tokens:
     • Ensure that the Privacera Access Token and Privacera Secret Token used in your privacera_aws.sh file are correctly configured. These tokens are crucial for authenticating with Privacera services.

File Explorer fails to read files when S3 signed URL is enabled¶

When S3 signed URL is enabled for your account, listing buckets and objects in the File Explorer works, but reading, downloading, or uploading a file fails.