StorageGRID S3 GET Requests Failing with Intermittent SignatureDoesNotMatch Errors
Applies to
- NetApp StorageGRID
- AWS SDK based applications
Issue
- Applications accessing objects from StorageGRID through S3-compatible clients intermittently encounter
SignatureDoesNotMatch authenticationerrors during GET requests. - The issue is limited to specific application instances or pods, and the following error is observed in application logs:
400 Bad Request on POST request for "https://apigateway.xxx/xxxx/xxxx": "{"type":"about:xxxx","title":"xxxx validation failed","status":400,"detail":"Failed to load an object from S3: S3 Error [SignatureDoesNotMatch]: The request signature we calculated does not match the signature you provided. Check your AWS Secret Access Key and signing method. For more information, see REST Authentication and SOAP Authentication for details. (Status: 403)","instance":"/xxxx","properties":{}}"
- Restarting the affected application instance or pod temporarily restores successful requests.
- StorageGRID remains healthy, with no corresponding authentication failures observed in StorageGRID logs.
