title: Artifactory HA s3-storage-v3 Permissions Issue
body: <p>Using the latest helm chart <code>4.7.6</code>  and latest artifactory build <code>7.12.6</code> I've setup the backend using S3V3.</p>
  <p>My <code>binarystore.xml</code> is configured as follows:</p>
  <pre><code>    &lt;provider id=&quot;s3-storage-v3&quot; type=&quot;s3-storage-v3&quot;&gt;
          &lt;testConnection&gt;false&lt;/testConnection&gt;
          &lt;region&gt;us-east-1&lt;/region&gt;
          &lt;bucketName&gt;example-development-artifactory&lt;/bucketName&gt;
          &lt;path&gt;artifactory/filestore&lt;/path&gt;
          &lt;endpoint&gt;s3.us-east-1.amazonaws.com&lt;/endpoint&gt;
          &lt;maxConnections&gt;50&lt;/maxConnections&gt;
          &lt;useInstanceCredentials&gt;true&lt;/useInstanceCredentials&gt;
          &lt;refreshCredentials&gt;true&lt;/refreshCredentials&gt;
          &lt;roleName&gt;arn:aws:iam::&lt;redacted&gt;:role/artifactory-k8s-s3-role&lt;/roleName&gt;
          &lt;usePresigning&gt;false&lt;/usePresigning&gt;
          &lt;signatureExpirySeconds&gt;300&lt;/signatureExpirySeconds&gt;
          &lt;kmsServerSideEncryptionKeyId&gt;alias/development-artifactory-s3&lt;/kmsServerSideEncryptionKeyId&gt;
          &lt;property name=&quot;s3service.server-side-encryption&quot; value=&quot;aws:kms&quot;&gt;&lt;/property&gt;
      &lt;/provider&gt;
  </code></pre>
  <p>I had to manually edit this file to enter many of the values as the helm chart didn't seem to respect the override values I set.</p>
  <p>In the Artifactory logs I'm getting the errors:</p>
  <pre><code>021-01-28T21:50:04.365Z [jfrt ] [ERROR] [7b2ddbde9c2d661d] [.c.EventualDownstreamWorker:74] [-cluster-s3-worker-2] - EventualDownstreamWorker caught error while operating on actions for sha1 1f210f9518d447d88bcfe69956ae04a9eee5ef66:
  com.amazonaws.services.s3.model.AmazonS3Exception: Forbidden (Service: Amazon S3; Status Code: 403; Error Code: 403 Forbidden; Request ID: 9C984900E360C286; S3 Extended Request ID: 2VKwlNzoHrFAt3PF4ysuCzUEhh619NebawfUjAOJXNwrsd3wz/XqgFO63nGmfsR4DvuEIQ2zNWo=; Proxy: null)
  </code></pre>
  <p>There was an open issue on Github <a href="https://github.com/jfrog/charts/issues/839" rel="nofollow noreferrer">https://github.com/jfrog/charts/issues/839</a> but supposedly has been fixed.</p>
  <p>Anyone know of a way I can test out why I'm getting these constant deny issues? Thanks!</p>
  <p>Role Policy:</p>
  <pre><code>{
      &quot;Version&quot;: &quot;2012-10-17&quot;,
      &quot;Statement&quot;: [
          {
              &quot;Action&quot;: &quot;*&quot;,
              &quot;Effect&quot;: &quot;Allow&quot;,
              &quot;Resource&quot;: &quot;*&quot;
          }
      ]
  }
  </code></pre>