I am trying to use a s3 bucket as a backend for storing stat

Question

I am trying to use a s3 bucket as a backend for storing state When I use `local` as a backend I can successfully provision AWS resources but when I try to setup a s3 backend I get the below error I can read write to the bucket via AWS CLI I have also tried using a fully public bucket for debugging only and got the same error Any advice would be greatly appreciated ```error could not create stack An IO error occurred while writing the new snapshot file blob key pulumi stacks dev json code=Unknown AccessDenied Access Denied status code 403 request id XXXXXXXXXXXXX host id XXXXXXXXXXXXXXXXXXXXXX```

billowy-army-68599 · Answer

do you have aws credentials configured for that bucket

gray-river-5585 · Answer

I think so I can use the AWS CLI to list put get

billowy-army-68599 · Answer

can you create that file ` pulumi stacks dev json`

gray-river-5585 · Answer

Yes I can create that object via `aws s3api put object`

billowy-army-68599 · Answer

interesting Pulumi just uses the AWS SDK so I can t understand why that wouldn t work

gray-river-5585 · Answer

I have tried cranking the verbose level but I don t get any additional output

gray-river-5585 · Answer

Looks like level 7 may have something extra to say <https github com pulumi pulumi blob master pkg backend filestate state go L209> I will try that one specifically

gray-river-5585 · Answer

hmm cannot seem to get that logging line to fire

billowy-army-68599 · Answer

` logtostderr verbose` should do it

gray-river-5585 · Answer

Thanks that got the verbose logs out

gray-river-5585 · Answer

Unfortunately no additional information in them

billowy-army-68599 · Answer

what does `aws sts get caller identity` return do you have any env vars set that might be conflicting

gray-river-5585 · Answer

I get a valid response with my token in it

gray-river-5585 · Answer

I am wondering if I have misconfigured the `bucket path`

billowy-army-68599 · Answer

how have you set it

gray-river-5585 · Answer

`pulumi login aws region `

billowy-army-68599 · Answer

did you try just `pulumi login <s3 bucket name>`

gray-river-5585 · Answer

Just tried that and got a new error

gray-river-5585 · Answer

< billowy army 68599> That was it Thank you for helping me step through that

billowy-army-68599 · Answer

No worries Would you mind opening an issue for this in <http github com pulumi pulumi |github com pulumi pulumi > There s no reason I can think of that the fully qualified bucket name shouldn t work

gray-river-5585 · Answer

I would be happy to I opened a docs PR for a minor wording change that would have helped me