While using s3.get_public_access_block(Bucket=bucket_name) in AWS lambda NoSuchPublicAccessBlockConfiguration error comes up

[aditisri07]

Describe the bug

The error:

An error occurred (NoSuchPublicAccessBlockConfiguration) when calling the GetPublicAccessBlock operation: The public access block configuration was not found.

Observation: The command seems to be working fine when the buckets are not public and the error is received when it is public.

Version of boto3 used: 1.20.32
Version of botocore used: 1.23.32

Expected Behavior

Expected it to return the response in following format
{
'PublicAccessBlockConfiguration': {
'BlockPublicAcls': True|False,
'IgnorePublicAcls': True|False,
'BlockPublicPolicy': True|False,
'RestrictPublicBuckets': True|False
}
}

Current Behavior

throwing the following error:
An error occurred (NoSuchPublicAccessBlockConfiguration) when calling the GetPublicAccessBlock operation: The public access block configuration was not found.

when a public bucket is passed in its parameter

Reproduction Steps

public_access_block_response = s3.get_public_access_block(Bucket='bucket_name')

where bucket_name is public

Possible Solution

No response

Additional Information/Context

No response

SDK version used

Python 3.9

Environment details (OS name and version, etc.)

AWS lambda

[aBurmeseDev]

Hi @aditisri07 - thanks for reaching out.

Public access is not enabled by default on initial bucket creation and can be updated via AWS Console under your bucket permission settings. Please see screenshot below for reference.

Hope it helps,
John

[aditisri07]

Hey @aBurmeseDev ,

We have set the block all public access for the said bucket to off. It is a public bucket already.

[theboyisno-one]

facing same issue

[hsiam261]

Was facing the same issue. This can happen if someone manually deleted the public_access_block using a call to the delete-public-access-block api.

> aws s3api get-public-access-block --bucket siam-test-bucket-1
{
    "PublicAccessBlockConfiguration": {
        "BlockPublicAcls": false,
        "IgnorePublicAcls": false,
        "BlockPublicPolicy": false,
        "RestrictPublicBuckets": false
    }
}
> aws s3api delete-public-access-block --bucket siam-test-bucket-1
> aws s3api get-public-access-block --bucket siam-test-bucket-1
An error occurred (NoSuchPublicAccessBlockConfiguration) when calling the GetPublicAccessBlock operation: The public access block configuration was not found

When you delete the public access block, from the aws console, the options look the same as if setting all the options to false.
If you just edit from the console, not change anything and then save, then the public-access-block gets created again and it works as expected again.

[aBurmeseDev]

@hsiam261 - kudos to you for sharing it with others. If anyone's come across this, please refer to the commend above. Closing it for now.

[github-actions]

This issue is now closed. Comments on closed issues are hard for our team to see.
If you need more assistance, please open a new issue that references this one.