Hey folks! Running into an

S3 access denied

error when locally running a flow connected to a remote datastore:

Metaflow 2.8.1 executing SalaryTrainer for user:winstonvan
Validating your flow...
    The graph looks good!
Running pylint...
    Pylint is happy!
    S3 access denied:
    <s3://metaflow-datastore/metaflow/flow/342/_parameters/11645/0.attempt.json>

We’ve set up a IAM user policy to access the metaflow datastore bucket below:

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Action": [
        "s3:ListBucket",
        "s3:ListBucketVersions",
        "s3:GetBucketTagging",
        "s3:GetBucketVersioning",
        "s3:GetObject*",
        "s3:PutObject",
        "s3:DeleteObject"
      ],
      "Effect": "Allow",
      "Resource": [
        "arn:aws:s3:::metaflow-datastore",
        "arn:aws:s3:::metaflow-datastore/*"
      ]
    }
  ]
}

Is there a permission that we’re missing to allow metaflow to access our S3 datastore bucket?