{"record":{"id":"eb6dccffc3ccc59c","repo":"remotion-dev/remotion","slug":"since-april-2023-more-aws-permissions-are-require","errorCode":null,"errorMessage":"Since April 2023, more AWS permissions are required to create an S3 bucket. You need to update your user policy to continue. See https://remotion.dev/docs/lambda/s3-public-access for instructions on how to resolve this issue.","messagePattern":"Since April 2023, more AWS permissions are required to create an S3 bucket\\. You need to update your user policy to continue\\. See https://remotion\\.dev/docs/lambda/s3-public-access for instructions on how to resolve this issue\\.","errorType":"exception","errorClass":"Error","httpStatus":null,"severity":"error","filePath":"packages/lambda-client/src/create-bucket.ts","lineNumber":38,"sourceCode":"\t\t\tnew CreateBucketCommand({\n\t\t\t\tBucket: bucketName,\n\t\t\t}),\n\t\t);\n\n\t\ttry {\n\t\t\tawait getS3Client({\n\t\t\t\tregion,\n\t\t\t\tcustomCredentials: null,\n\t\t\t\tforcePathStyle,\n\t\t\t\trequestHandler,\n\t\t\t}).send(\n\t\t\t\tnew DeleteBucketOwnershipControlsCommand({\n\t\t\t\t\tBucket: bucketName,\n\t\t\t\t}),\n\t\t\t);\n\t\t} catch (err) {\n\t\t\tif ((err as Error).message.includes('Access Denied')) {\n\t\t\t\tthrow new Error(\n\t\t\t\t\t'Since April 2023, more AWS permissions are required to create an S3 bucket. You need to update your user policy to continue. See https://remotion.dev/docs/lambda/s3-public-access for instructions on how to resolve this issue.',\n\t\t\t\t);\n\t\t\t}\n\n\t\t\tthrow err;\n\t\t}\n\n\t\ttry {\n\t\t\tawait getS3Client({\n\t\t\t\tregion,\n\t\t\t\tcustomCredentials: null,\n\t\t\t\tforcePathStyle,\n\t\t\t\trequestHandler,\n\t\t\t}).send(\n\t\t\t\tnew DeletePublicAccessBlockCommand({\n\t\t\t\t\tBucket: bucketName,\n\t\t\t\t}),\n\t\t\t);","sourceCodeStart":20,"sourceCodeEnd":56,"githubUrl":"https://github.com/remotion-dev/remotion/blob/78fe4bb3fdb5a2cd68724393d63cb223db333fa7/packages/lambda-client/src/create-bucket.ts#L20-L56","documentation":"While creating a bucket, Remotion calls DeleteBucketOwnershipControls to disable Object Writer ownership so ACLs can be used. If that call is denied (error message contains 'Access Denied'), the IAM user lacks s3:PutBucketOwnershipControls. Since April 2023 AWS requires these extra permissions to fully configure a bucket, so the client surfaces a dedicated, link-bearing message.","triggerScenarios":"getOrCreateBucket / createBucket invoked with an IAM user whose policy lacks s3:PutBucketOwnershipControls.","commonSituations":"Pre-April-2023 IAM policy still attached; minimal hand-rolled policy; corporate restricted policy.","solutions":["Attach the current recommended Remotion IAM policy (linked in the message) which includes s3:PutBucketOwnershipControls, s3:PutBucketPublicAccessBlock, s3:PutBucketPolicy, s3:PutBucketAcl","Re-run the bucket creation once the policy is updated"],"exampleFix":null,"handlingStrategy":"try-catch","validationCode":null,"typeGuard":null,"tryCatchPattern":"try {\n  await getOrCreateBucket({...});\n} catch (err) {\n  if ((err as Error).message.includes('more AWS permissions are required to create an S3 bucket')) {\n    // update IAM policy per https://remotion.dev/docs/lambda/s3-public-access\n  }\n  throw err;\n}","preventionTips":["Attach the current recommended Remotion IAM policy before first bucket creation","Audit the IAM policy for s3:PutBucketOwnershipControls / PutBucketPublicAccessBlock / PutBucketPolicy / PutBucketAcl","Re-test bucket creation in a scratch account after policy changes"],"tags":["aws","iam","s3","permissions"],"backgroundTag":null,"analyzedSha":"78fe4bb3fdb5a2cd68724393d63cb223db333fa7","analyzedAt":"2026-08-12T17:18:50.444Z","schemaVersion":2},"datasetVersion":"2026-08-12T18:17:37.767Z"}