title: Cloud Object Storage S3: AccessDenied Error when calling GetObject operation from specific servers
body: <p>I was trying to fetch a document from S3 bucket on IBM Cloud Object Storage and I get access denied error. I was able to upload an object successfully to the same bucket with same credentials. Also I get this error when I tried to download the object from some specific servers only. Is there any limitation from COS not to allow read access from specific servers/domains ?
  I tried fetching documents using aws cli commands and also with the python boto3 library as well and the behavior is same.</p>
  
  <p>Error:
  "An error occurred (AccessDenied) when calling the GetObject operation: Access Denied"</p>
  
  <p><strong>Update:</strong></p>
  
  <ul>
  <li>I tried the same boto3 module on Mac OSX(10.11.6) with the same Bucket and Key combinations and it works fine.</li>
  <li>I was trying my code on a RHEL 6.8 server and it breaks for files greater than 100MB. (This has both python 2.7 and 2.6, I've tried with both)</li>
  <li>So even decided to use the AWS CLI command to download the file, it downloads exactly 2MB and gives the (AccessDenied) message.</li>
  <li>So I went ahead and checked if the NodeJS (aws-sdk) module can pull something off, and to my surprise, it worked perfectly everytime for the S3 object download on RHEL 6 and Mac OSX as well.  So NodeJS aws-sdk S3 module is able to handle large downloads on RHEL 6.</li>
  </ul>
  
  <p>So now I'm not sure what is wrong with AWS CLI and boto3 (python based apps/modules for S3) in case of RHEL 6 server.  The same code as I mentioned works on Mac OSX with Python 2.7.</p>
  
  <p>AWS CLI Command used:</p>
  
  <pre><code>aws --endpoint-url=http://s3-api.us-geo.objectstorage.xxxx.net s3 cp  s3://bucketname/filename.tar.gz ./
  </code></pre>