Help Center/ Object Storage Service/ FAQs/ Buckets and Objects/ Why Am I Unable to Download an Object?
Updated on 2024-04-15 GMT+08:00
View PDF

Why Am I Unable to Download an Object?

  • Check whether the network connectivity between the local computer and OBS is normal. If the network is faulty, restore the network connection.
  • Check whether the account is in arrears or the account balance is insufficient. If this is the case, pay off the outstanding balance or top up the account.
    1. Log in to OBS Console.
    2. On the top navigation menu, click Billing & Costs to go to Billing Center.
    3. On the Overview page, you can view the balance of the account.
    4. If your account is in arrears, top it up by referring to Renewal Management.
    5. If your object upload still fails after the account is brought current, contact customer service.
  • Check whether the account has the permissions needed to download objects from the bucket. This check should cover IAM permissions, bucket policies, object policies, bucket ACLs, and object ACLs. If the account does not have the required permissions, grant the permissions first.
    1. Log in to the management console.
    2. On the top navigation menu, click the username and select Identity and Access Management to log in to the IAM console and verify the permissions of the user.
      1. On the Users page, search for the username.
      2. Click the username to view details for that user, and check the user groups where the user belongs. If the user is not a member of any user group, click Modify and select a user group.
      3. In the navigation pane, click User Groups and find the user group to which the user belongs. Click the icon of the downward arrow next to the user group name to view user group permissions. Find OBS under the Project Name column and click View under the Operation column, to check whether the user group has the permission required to download objects. If not, create a user group, configure a policy that grants the user group the object download permission, and add the user to this group. Alternatively, you can configure a bucket policy to grant the IAM user the permission to download objects from the bucket. Refer to 3 for more information.
      4. If the account that attempted to download files is not the owner of the bucket, take the actions described in 3 to check the bucket policy.
    3. On the top navigation menu, click Service List and choose Object Storage Service. On the OBS Console page, check whether the bucket from which the object is to be downloaded restricts users from downloading objects.
      1. In the navigation pane, choose Permissions > Bucket Policy and check whether there is a policy that prevents the account or IAM user from downloading objects. If there is, modify the bucket policy to grant the account or IAM user the required permissions. For details, see Granting Specific Operation Permissions on a Bucket to Other Accounts or Granting an IAM User the Permissions Required to Perform Specific Operations on a Specific Bucket.
      2. Alternatively, you can also use the bucket ACL to grant the account write permissions for the bucket. For details, see Configuring a Bucket ACL.
  • Check whether the current object is encrypted with KMS. If the object is encrypted, downloading it from OBS Console, OBS Browser+, or obsutil will fail. To download it by using an SDK or API, the decryption key must be provided.
  • Check whether the object is in the Archive storage class. If it is and the status is Unrestored, restore the object first.
  • If the fault persists, contact customer service.
Parent topic: Buckets and Objects