Unable to get object metadata from S3. Check object key, region and/or access permissions on IndexFacesRequest for Amazon Rekognition

[xcellenceit]

We are using AWS Face Rekognition service for detecting faces from images. We have a gallery app (web on dot net core & mobile app on flutter) where we wants to offer filter by face. For this we send all the pics one by one to the AWS Rekognition to identify faces and store faces.

We have our dot net core based micro-service that sends pictures in background to identify faces. When we run this for the first time, while sending pictures, we get the response from AWS Face Rekognition service just fine for up to 100 images and identified 200 faces detected from the service. And then we started to face following issue.

On IndexFacesRequest method we are getting..

Unable to get object metadata from S3. Check object key, region and/or access permissions

We are using AWSSDK.Rekognition dll version 3.7.10.10 for integration.

We have already tried with suggestions we found on during searching..

We make sure that Object key is same.

We make sure that public access is enabled in AWS for the S3 bucket we are using. 

Gave public access by defining bucket policy

We make sure that RegionEndpoint for both client and s3 bucket are some.

The IAM user has the right permission defined.

Note that bucket versioning is disabled in the bucket we use.

We are not sure what is causing this issue and how to resolve this.

Please advise. Thanks in advance.

[ashishdhingra]

@xcellenceit The details you have provided are specific for your use case. Could you please elaborate on the following:

• What AWS call in your application specific IndexFacesRequest is failing?
• Are you sure the configured AWS credentials on you development environment have the same set of IAM policies attached as shown in description above?
• Could you try enabling verbose response logging by using the below code (for console application) and see if you see helpful information being logged:

AWSConfigs.LoggingConfig.LogResponses = Amazon.ResponseLoggingOption.Always;
AWSConfigs.LoggingConfig.LogTo = Amazon.LoggingOptions.Console;
AWSConfigs.LoggingConfig.LogMetrics = true;
AWSConfigs.AddTraceListener("Amazon", new System.Diagnostics.ConsoleTraceListener());

Thanks,
Ashish

[github-actions[bot]]

Hello! Reopening this discussion to make it searchable.