# Recording Not accessible from S3 bucket using OpenVidu Inspector **URL:** \ **Category:** Issues with deployment\ **Tags:** v2\ **Created:** [July 28, 2021, 10:31am UTC](https://openvidu.discourse.group/t/recording-not-accessible-from-s3-bucket-using-openvidu-inspector/3259 "2021-07-28T10:31:32Z")\ **Posts on this page:** 13\ **Page:** 1
**Author:** ![vipin\_mishra](https://yyz2.discourse-cdn.com/free1/user_avatar/openvidu.discourse.group/vipin_mishra/32/32_2.png) [@vipin\_mishra](https://openvidu.discourse.group/u/vipin_mishra)\ **Post date:** [July 28, 2021, 10:31am UTC](https://openvidu.discourse.group/t/recording-not-accessible-from-s3-bucket-using-openvidu-inspector/3259/1 "2021-07-28T10:31:32Z")
I installed Openvidu Pro first 2.18.0 But faced same problem , So updated to new 2.19.0 But still not accessible video from s3 bucket ---
**Author:** ![cruizba](https://yyz2.discourse-cdn.com/free1/user_avatar/openvidu.discourse.group/cruizba/32/18_2.png) [@cruizba](https://openvidu.discourse.group/u/cruizba)\ **Post date:** [July 28, 2021, 12:20pm UTC](https://openvidu.discourse.group/t/recording-not-accessible-from-s3-bucket-using-openvidu-inspector/3259/2 "2021-07-28T12:20:15Z")
You probably need to modify s3 bucket policy to allow to the IP of your master node to access s3 recordings. ---
**Author:** ![cruizba](https://yyz2.discourse-cdn.com/free1/user_avatar/openvidu.discourse.group/cruizba/32/18_2.png) [@cruizba](https://openvidu.discourse.group/u/cruizba)\ **Post date:** [July 28, 2021, 12:33pm UTC](https://openvidu.discourse.group/t/recording-not-accessible-from-s3-bucket-using-openvidu-inspector/3259/3 "2021-07-28T12:33:29Z")
Add a bucket policy into your s3 bucket like this one: ```auto { "Version": "2012-10-17", "Id": "PolicyId", "Statement": [ { "Sid": "SourceIP", "Effect": "Allow", "Principal": "*", "Action": "s3:GetObject", "Resource": "arn:aws:s3:::/*", "Condition": { "IpAddress": { "aws:SourceIp": "" } } } ] } ``` Where: - ``: Name of your s3 bucket - ``: Public IP where recordings can be accessed. Another possibility is to make the bucket publicly accessible ---
**Author:** ![vipin\_mishra](https://yyz2.discourse-cdn.com/free1/user_avatar/openvidu.discourse.group/vipin_mishra/32/32_2.png) [@vipin\_mishra](https://openvidu.discourse.group/u/vipin_mishra)\ **Post date:** [July 28, 2021, 1:51pm UTC](https://openvidu.discourse.group/t/recording-not-accessible-from-s3-bucket-using-openvidu-inspector/3259/4 "2021-07-28T13:51:54Z")
still same 403 , i created above same problem ---
**Author:** ![cruizba](https://yyz2.discourse-cdn.com/free1/user_avatar/openvidu.discourse.group/cruizba/32/18_2.png) [@cruizba](https://openvidu.discourse.group/u/cruizba)\ **Post date:** [July 28, 2021, 1:54pm UTC](https://openvidu.discourse.group/t/recording-not-accessible-from-s3-bucket-using-openvidu-inspector/3259/5 "2021-07-28T13:54:16Z")
I’ve tested some time ago and it worked, did you put your public ip (The public ip of your own personal computer) in the s3 bucket policy? Don’t use the `<` and `>` characters. It should look like this: ```auto { "Version": "2012-10-17", "Id": "PolicyId", "Statement": [ { "Sid": "SourceIP", "Effect": "Allow", "Principal": "*", "Action": "s3:GetObject", "Resource": "arn:aws:s3:::my-bucket/*", "Condition": { "IpAddress": { "aws:SourceIp": "1.2.3.4" } } } ] } ``` ---
**Author:** ![vipin\_mishra](https://yyz2.discourse-cdn.com/free1/user_avatar/openvidu.discourse.group/vipin_mishra/32/32_2.png) [@vipin\_mishra](https://openvidu.discourse.group/u/vipin_mishra)\ **Post date:** [July 28, 2021, 1:55pm UTC](https://openvidu.discourse.group/t/recording-not-accessible-from-s3-bucket-using-openvidu-inspector/3259/6 "2021-07-28T13:55:26Z")
I put the public IP openvidu server ---
**Author:** ![cruizba](https://yyz2.discourse-cdn.com/free1/user_avatar/openvidu.discourse.group/cruizba/32/18_2.png) [@cruizba](https://openvidu.discourse.group/u/cruizba)\ **Post date:** [July 28, 2021, 1:56pm UTC](https://openvidu.discourse.group/t/recording-not-accessible-from-s3-bucket-using-openvidu-inspector/3259/7 "2021-07-28T13:56:00Z")
No, this IP should be the IP of the user which want to check recordings. Because the videos are accessed directly using s3 generated http urls ---
**Author:** ![vipin\_mishra](https://yyz2.discourse-cdn.com/free1/user_avatar/openvidu.discourse.group/vipin_mishra/32/32_2.png) [@vipin\_mishra](https://openvidu.discourse.group/u/vipin_mishra)\ **Post date:** [July 28, 2021, 1:57pm UTC](https://openvidu.discourse.group/t/recording-not-accessible-from-s3-bucket-using-openvidu-inspector/3259/8 "2021-07-28T13:57:15Z")
even in Openvidu Inspector , Thats strange I think we should add acess point for it ---
**Author:** ![cruizba](https://yyz2.discourse-cdn.com/free1/user_avatar/openvidu.discourse.group/cruizba/32/18_2.png) [@cruizba](https://openvidu.discourse.group/u/cruizba)\ **Post date:** [July 28, 2021, 1:58pm UTC](https://openvidu.discourse.group/t/recording-not-accessible-from-s3-bucket-using-openvidu-inspector/3259/9 "2021-07-28T13:58:34Z")
In that case, that is a missing feature. @micael.gallego what do you think? ---
**Author:** ![micael.gallego](https://yyz2.discourse-cdn.com/free1/user_avatar/openvidu.discourse.group/micael.gallego/32/2_2.png) [@micael.gallego](https://openvidu.discourse.group/u/micael.gallego)\ **Post date:** [July 28, 2021, 2:48pm UTC](https://openvidu.discourse.group/t/recording-not-accessible-from-s3-bucket-using-openvidu-inspector/3259/10 "2021-07-28T14:48:17Z")
OpenVidu inspector is not doing any forward of s3 stored files. It just give the user S3 URLs. So you have to configure s3 security as you want to allow inspector users to access s3 files. In fact, inspector is just a monitoring tool. The application develop on top of OpenVidu is the final responsible to provide access to videos to the final users. In any case, please create an entry in request for features section in the forum so we can consider it to be implemented in the future. Best regards ---
**Author:** ![vipin\_mishra](https://yyz2.discourse-cdn.com/free1/user_avatar/openvidu.discourse.group/vipin_mishra/32/32_2.png) [@vipin\_mishra](https://openvidu.discourse.group/u/vipin_mishra)\ **Post date:** [July 28, 2021, 3:09pm UTC](https://openvidu.discourse.group/t/recording-not-accessible-from-s3-bucket-using-openvidu-inspector/3259/11 "2021-07-28T15:09:31Z")
Thanks @cruizba and @micael.gallego for helping me Some More Suggestions 1.In case of aws cloudformaton what permission IAM user needed please add it in documents if you say i will happy to add this because some time we have IAM access in server setup 2.Please add a job/freelance opportunity category community’s ,it will helpfull for openvidu user and developer reachability Thanks ---
**Author:** ![cruizba](https://yyz2.discourse-cdn.com/free1/user_avatar/openvidu.discourse.group/cruizba/32/18_2.png) [@cruizba](https://openvidu.discourse.group/u/cruizba)\ **Post date:** [July 29, 2021, 8:23am UTC](https://openvidu.discourse.group/t/recording-not-accessible-from-s3-bucket-using-openvidu-inspector/3259/12 "2021-07-29T08:23:56Z")
About the first question, I don’t understand, what do you mean? Do you mean what permissions the IAM user of S3 need? ---
**Author:** ![vipin\_mishra](https://yyz2.discourse-cdn.com/free1/user_avatar/openvidu.discourse.group/vipin_mishra/32/32_2.png) [@vipin\_mishra](https://openvidu.discourse.group/u/vipin_mishra)\ **Post date:** [July 29, 2021, 8:37am UTC](https://openvidu.discourse.group/t/recording-not-accessible-from-s3-bucket-using-openvidu-inspector/3259/13 "2021-07-29T08:37:34Z")
I mean when anyone deploy Openvidu Server as IAM not root aws user using cloud formation, So what permission IAM should have for doing deployment Thanks