# Troubleshooting

Common issues and fixes when using Aurora’s S3-compatible API.

## Authentication errors (403, SignatureDoesNotMatch)

- Verify access key and secret are correct.
- Ensure the profile and endpoint URL are used in every command.
- Check for clock skew >15 minutes; sync system time (NTP).

## Access denied (403, AccessDenied)

- The key may not have permissions for the bucket/prefix.
- Listing requires `s3:ListBucket`; reading requires `s3:GetObject`.
- If scoped to specific buckets, confirm the target bucket is included.

## NoSuchBucket / NoSuchKey

- Confirm the bucket exists and name is spelled correctly.
- Use path-style addressing consistently.

## Multipart upload stuck

- Incomplete multipart uploads are automatically deleted after 24 hours.
- To manually abort: list ongoing uploads and abort stale ones.
- Re-upload missing parts and complete with correct ETags.

## Object Lock prevents deletion

- In Compliance mode, deletion is blocked until retention expires.
- In Governance mode, deletion requires bypass header and permission.