Post #3439113
2026-06-19 14:43 UTC
ugh...fartibast.
My #Mastodon cleanup scripts have broken. I used to do
> tootctl media remove-orphans
to clean up the files.
But now all it returns is
> Error fetching list of files: Access Denied
Was assuming it would be a S3 policy issue, but my policy file on the S3 bucket is
> "Action": "s3:*",
> "Resource": "arn:aws:s3:::bucket/*",
> "Effect": "Allow"
so should work.
Does remove-orphans provide better debug logging so I could see the actual HTTP request made to the S3 bucket?
Replies (1)
-
@john@social.ahlroos.me 2026-06-19 15:12
ah, found this issue. Policy issue after all. You need: "Resource": [ "arn:aws:s3:::bucket", "arn:aws:s3:::bucket/*", ] for the bucket for ListObjects to work. Would love to see this added to the docs as they are not currently telling you this. https://docs.joinmastodon.org/admin/optional/object-storage/