Hi @nowxoel,
Thanks for details. We actually managed to fix this error on our side and launch an update. Please make sure you upgrade to the latest version - first, then please set the following setups on your AWS account:
IAM Security Roles
{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Action": [
"cognito-sync:*",
"cognito-identity:*",
"S3:*"
],
"Resource": [
"*"
]
}
]
}
Permissions tab
Bucket policy
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AddPerm",
"Effect": "Allow",
"Principal": "*",
"Action": "s3:GetObject",
"Resource": "arn:aws:s3:::YOUR-BUCKET-NAME/*",
"Condition": {
"StringLike": {
"aws:Referer": "YOUR-DOMAIN/*"
}
}
},
{
"Sid": "AddPerm2",
"Effect": "Allow",
"Principal": "*",
"Action": "*",
"Resource": "arn:aws:s3:::YOUR-BUCKET-NAME/*"
}
]
}
ACL settings
CORS settings
[
{
"AllowedHeaders": [
"*"
],
"AllowedMethods": [
"GET",
"PUT",
"DELETE",
"POST"
],
"AllowedOrigins": [
"*"
],
"ExposeHeaders": [
"ETag"
],
"MaxAgeSeconds": 30000
}
]
Please note: Setting the CORS policy like this will allow everyone to change anything in your bucket, but you can definitely go deeper and set it up a more secure way. For example, you can use the following JSON for CORS policy to allow access from your domain only ( change the allowed origin to the URL of your app starting with https ):
[
{
"AllowedHeaders": [
"*"
],
"AllowedMethods": [
"GET",
"PUT",
"DELETE",
"POST"
],
"AllowedOrigins": [
"https://yourdomain.com",
"https://yourdomain.bubbleapps.io"
],
"ExposeHeaders": [
"ETag"
],
"MaxAgeSeconds": 30000
}
]
So just copy and paste the JSON setups above and change with your own domains and bucket names, then give it a try again. You can check on our updated docs for more information if you will.
Hope it helps!