title: An error occurred (AccessDenied) when calling the GetObjectTagging operation: Access Denied Even sync from public bucket
body: <p>The line that I am trying to run is</p>
  <pre><code>aws s3 sync s3://sourcebucket.publicfiles s3://mybucket
  </code></pre>
  <p>I have been looking through multiple question like this and I have tried about everything.</p>
  <p>I have changed my IAM policy to give full access</p>
  <pre><code>{
      &quot;Version&quot;: &quot;2012-10-17&quot;,
      &quot;Statement&quot;: [
          {
              &quot;Sid&quot;: &quot;VisualEditor0&quot;,
              &quot;Effect&quot;: &quot;Allow&quot;,
              &quot;Action&quot;: [
                  &quot;s3:ListStorageLensConfigurations&quot;,
                  &quot;s3:ListAccessPointsForObjectLambda&quot;,
                  &quot;s3:GetAccessPoint&quot;,
                  &quot;s3:PutAccountPublicAccessBlock&quot;,
                  &quot;s3:GetAccountPublicAccessBlock&quot;,
                  &quot;s3:ListAllMyBuckets&quot;,
                  &quot;s3:ListAccessPoints&quot;,
                  &quot;s3:ListJobs&quot;,
                  &quot;s3:PutStorageLensConfiguration&quot;,
                  &quot;s3:ListMultiRegionAccessPoints&quot;,
                  &quot;s3:CreateJob&quot;
              ],
              &quot;Resource&quot;: &quot;*&quot;
          },
          {
              &quot;Sid&quot;: &quot;VisualEditor1&quot;,
              &quot;Effect&quot;: &quot;Allow&quot;,
              &quot;Action&quot;: &quot;s3:*&quot;,
              &quot;Resource&quot;: &quot;arn:aws:s3::ID:accesspoint/*&quot;
          },
          {
              &quot;Sid&quot;: &quot;VisualEditor2&quot;,
              &quot;Effect&quot;: &quot;Allow&quot;,
              &quot;Action&quot;: &quot;s3:*&quot;,
              &quot;Resource&quot;: [
                  &quot;arn:aws:s3:::mybucket&quot;,
                  &quot;arn:aws:s3:*:ID:accesspoint/*&quot;,
                  &quot;arn:aws:s3:us-west-2:ID:async-request/mrap/*/*&quot;,
                  &quot;arn:aws:s3:::*/*&quot;,
                  &quot;arn:aws:s3:*:938745241482:storage-lens/*&quot;,
                  &quot;arn:aws:s3:*:938745241482:job/*&quot;,
                  &quot;arn:aws:s3-object-lambda:*:ID:accesspoint/*&quot;
              ]
          }
      ]
  }
  </code></pre>
  <p>As well as the bucket policy</p>
  <pre><code>{
      &quot;Version&quot;: &quot;2012-10-17&quot;,
      &quot;Id&quot;: &quot;Policy&quot;,
      &quot;Statement&quot;: [
          {
              &quot;Sid&quot;: &quot;statement&quot;,
              &quot;Effect&quot;: &quot;Allow&quot;,
              &quot;Principal&quot;: {
                  &quot;AWS&quot;: &quot;arn:aws:iam::ID:root&quot;
              },
              &quot;Action&quot;: &quot;s3:*&quot;,
              &quot;Resource&quot;: [
                  &quot;arn:aws:s3:::mybucket/*&quot;,
                  &quot;arn:aws:s3:::mybucket&quot;
              ]
          }
      ]
  }
  </code></pre>
  <p>At this point I have tried making my bucket public as well as</p>
  <p><code>aws s3 cp s3://sourcebucket.publicfiles/file  s3://mybucket/file --acl bucket-owner-full-control</code></p>
  <p>for the specific files that are not working but it gives me the same error.</p>
  <blockquote>
  <p>An error occurred (AccessDenied) when calling the GetObjectTagging operation: Access Denied</p>
  </blockquote>
  <p>Since this is a public bucket I do not have access to its policies.</p>
  <p>I am not sure what else to try so I would really appreciate any insight</p>
  <p>PS This is my first post here so if there is a better way to format question/ any more info I should give I am sorry</p>