title: Amazon S3 file 'Access Denied' exception in Cross-Account
body: <p>I've 2 AWS accounts. Account A has S3 bucket 'BUCKET' in which I've put file using Java api. I've configured my 'BUCKET' policy to allow cross-account file publishing.
  But, when I try to open this file from Account A, it says <Code>AccessDenied</Code>Access Denied with hostId and requestId.</p>
  
  <p>This file is published through Account B using java api, and this file has same size as that published through api. I tried to change file sizes and the new sizes were shown on AWS S3 console.
  Here is my bucket policy:</p>
  
  <pre><code>    {
  "Version": "2008-10-17",
  "Id": "Policy1357935677554",
  "Statement": [
      {
          "Sid": "Stmt1357935647218",
          "Effect": "Allow",
          "Principal": {
              "AWS": "arn:aws:iam::ACCOUNTB:user/accountb-user"
          },
          "Action": "s3:ListBucket",
          "Resource": "arn:aws:s3:::bucket-name"
      },
      {
          "Sid": "Stmt1357935676138",
          "Effect": "Allow",
          "Principal": {
              "AWS": "arn:aws:iam::ACCOUNTB:user/accountb-user"
          },
          "Action": "s3:PutObject",
          "Resource": "arn:aws:s3:::bucket-name/*"
      },
      {
          "Sid": "Stmt1357935676138",
          "Effect": "Allow",
          "Principal": {
              "AWS": "arn:aws:iam::ACCOUNTB:user/accountb-user"
          },
          "Action": "s3:*",
          "Resource": "arn:aws:s3:::bucket-name/*"
      },
      {
          "Sid": "Stmt1357935647218",
          "Effect": "Allow",
          "Principal": {
              "AWS": "arn:aws:iam::ACCOUNTA:user/accounta-user"
          },
          "Action": "s3:ListBucket",
          "Resource": "arn:aws:s3:::bucket-name"
      },
      {
          "Sid": "Stmt1357935676138",
          "Effect": "Allow",
          "Principal": {
              "AWS": "arn:aws:iam::ACCOUNTA:user/accounta-user"
          },
          "Action": "s3:*",
          "Resource": "arn:aws:s3:::bucket-name/*"
      },
      {
          "Sid": "Stmt1357935676138",
          "Effect": "Allow",
          "Principal": {
              "AWS": "arn:aws:iam::ACCOUNTA:root"
          },
          "Action": "s3:*",
          "Resource": "arn:aws:s3:::bucket-name/*"
      }
  ]
  </code></pre>
  
  <p>}</p>
  
  <p>The problem is when I try to download/open this file from Account A, I'm not able to open it.</p>