Categories: IBM

Disabling ACLs for AWS S3 Buckets in asperatrapd

Introduction 

IBM Aspera High-Speed Transfer Server (HSTS) includes the ability to read and write objects directly to AWS S3 object storage buckets. For customers running HSTS on EC2 instances in the environment, the asperatrapd service is typically enabled to support object storage. 

Some customers may wish to disable Access Control Lists (ACLs) on their S3 buckets as part of their internal security practices or upon suggestion from Amazon. In some cases, writing objects to S3 via HSTS and asperatrapd may fail. 

Customers may see a message in

/opt/aspera/var/log/trapd/aspera-trapd.log 

such as: 

This bucket does not allow ACLs 

If transferring via ascp on the command line, customers may see an error such as: 

Session Stop  (Error: Server aborted session: Error 5 (The bucket does not allow ACLs (upload-put(2)) [Bad Request] (IO error)) creating destination path "examplefile.dat") 

Procedure 

To avoid these errors, a change can be made to the asperatrapd configuration. 

  • Make a backup of the file
/opt/aspera/etc/trapd/s3.properties 
  • Open that file in a text editor and look for a line that reads:
#aspera.s3session.x-amz-acl.enabled=true 
  • Uncomment this line, then set to false:
aspera.s3session.x-amz-acl.enabled=false 
  • Restart asperatrapd
systemctl restart asperatrapd 

This should resolve the error.  

If you have additional questions, PacGenesis Engineering is here to help! Please contact us for more information. 

YMP Admin

Recent Posts

What is Trend Micro Internet Security?

As more of our daily communication, entertainment, finance, and work tasks shift online, internet security…

1 week ago

How to Speed Up File Transfer: Techniques That Work

Every organization encounters bottlenecks when transferring files—especially large ones. Whether it’s a 100GB video project…

1 week ago

Top 10 Data Archiving Best Practices

Data archiving is more than just storing old files—it's about preserving valuable data long-term while…

1 week ago

What is Tailgating in Cyber Security?

Tailgating is a physical security breach that occurs when an unauthorized person follows an authorized…

1 week ago

What Does StrongDM Do?

The way organizations manage access to infrastructure has fundamentally changed with the rise of cloud…

1 week ago

How do I use the Aspera Connect plugin?

The Aspera Connect Plugin offers the speed, security, and dependability of Aspera offered via a…

2 weeks ago