title: Amazon S3 bucket returning 403 Forbidden
body: <p>I've recently inherited a Rails app that uses S3 for storage of assets. I have transferred all assets to my S3 bucket with no issues. However, when I alter the app to point to the new bucket I get 403 Forbidden Status. </p>
  
  <p>My S3 bucket is set up with the following settings:</p>
  
  <p><strong>Permissions</strong></p>
  
  <p>Everyone can list</p>
  
  <p><strong>Bucket Policy</strong></p>
  
  <pre><code>{
   "Version": "2012-10-17",
   "Statement": [
      {
          "Sid": "PublicReadGetObject",
          "Effect": "Allow",
          "Principal": "*",
          "Action": "s3:GetObject",
          "Resource": "arn:aws:s3:::bucketname/*"
      }
   ]
  }
  </code></pre>
  
  <p><strong>CORS Configuration</strong></p>
  
  <pre><code>&lt;?xml version="1.0" encoding="UTF-8"?&gt;
  &lt;CORSConfiguration xmlns="http://s3.amazonaws.com/doc/2006-03-01/"&gt;
      &lt;CORSRule&gt;
          &lt;AllowedOrigin&gt;*&lt;/AllowedOrigin&gt;
          &lt;AllowedMethod&gt;GET&lt;/AllowedMethod&gt;
          &lt;MaxAgeSeconds&gt;3000&lt;/MaxAgeSeconds&gt;
      &lt;/CORSRule&gt;
      &lt;CORSRule&gt;
          &lt;AllowedOrigin&gt;https://www.appdomain.com&lt;/AllowedOrigin&gt;
          &lt;AllowedMethod&gt;PUT&lt;/AllowedMethod&gt;
          &lt;AllowedMethod&gt;POST&lt;/AllowedMethod&gt;
          &lt;AllowedMethod&gt;DELETE&lt;/AllowedMethod&gt;
          &lt;AllowedHeader&gt;*&lt;/AllowedHeader&gt;
      &lt;/CORSRule&gt;
  &lt;/CORSConfiguration&gt;
  </code></pre>
  
  <p><strong>Static Web Hosting</strong></p>
  
  <p>Enabled.</p>
  
  <p>What else can I do to allow the public to reach these assets?</p>