Article - CS389091

File vault Synchronization fails with error "VPC endpoints do not support cross-region requests" when Master and Replica sites hosted on different regions and using Amazon S3 in Windchill PDMLink

Modified: 21-Mar-2023   


Applies To

  • Windchill PDMLink 12.0
  • Amazon S3
  • AWS S3

Description

  • File vault Synchronization fails with error "VPC endpoints do not support cross-region requests" when Master and Replica sites hosted on different regions and using Amazon S3 
  • For example : Master site hosted in EU region and Replica in US region 
  • Manually copy command also fails :
    • Error mesages:D:\Temp>aws s3 cp s3://<US_vault_location>/filename s3://<EU_vault_location>/filename
      copy failed: s3 cp s3://<US_vault_location>/filename to s3://<EU_vault_location>/filename An error occurred (AccessDenied) when calling the CopyObject operation: VPC endpoints do not support cross-region requests
  • Background Method Server log error:
ERROR [wt.router.3.1.PollingThread] wt.fv Administrator - Sync Mover  [123456789]: Sync failed for MOR StreamId[789456123] to vault[vault]. wt.util.WTException: com.amazonaws.services.s3.model.AmazonS3Exception: VPC endpoints do not support cross-region requests (Service: Amazon S3; Status Code: 403; Error Code: AccessDenied; Request ID: 56T4CCETY248MDKX; S3 Extended Request ID: cGYgLzq6E1acZRDGFwd9WKxOXsf2qP3PhIA0Dl7IqJfbSEB/ohgnZdsuzpex+pvi/K6jukj2wnsq5v4wZANzjA==; Proxy: null), S3 Extended Request ID: cGYgLzq6E1acZRDGFwd9WKxOXsf2qP3PhIA0Dl7IqJfbSEB/ohgnZdsuzpex+pvi/K6jukj2wnsq5v4wZANzjA==
Nested exception is: com.amazonaws.services.s3.model.AmazonS3Exception: VPC endpoints do not support cross-region requests (Service: Amazon S3; Status Code: 403; Error Code: AccessDenied; Request ID: 56T4CCETY248MDKX; S3 Extended Request ID: cGYgLzq6E1acZRDGFwd9WKxOXsf2qP3PhIA0Dl7IqJfbSEB/ohgnZdsuzpex+pvi/K6jukj2wnsq5v4wZANzjA==; Proxy: null), S3 Extended Request ID: cGYgLzq6E1acZRDGFwd9WKxOXsf2qP3PhIA0Dl7IqJfbSEB/ohgnZdsuzpex+pvi/K6jukj2wnsq5v4wZANzjA==
	at com.amazonaws.http.AmazonHttpClient$RequestExecutor.handleErrorResponse(AmazonHttpClient.java:1819)
	at com.amazonaws.http.AmazonHttpClient$RequestExecutor.handleServiceErrorResponse(AmazonHttpClient.java:1403)
	at com.amazonaws.http.AmazonHttpClient$RequestExecutor.executeOneRequest(AmazonHttpClient.java:1372)
	at com.amazonaws.http.AmazonHttpClient$RequestExecutor.executeHelper(AmazonHttpClient.java:1145)
	at com.amazonaws.http.AmazonHttpClient$RequestExecutor.doExecute(AmazonHttpClient.java:802)
	at com.amazonaws.http.AmazonHttpClient$RequestExecutor.executeWithTimer(AmazonHttpClient.java:770)
	at com.amazonaws.http.AmazonHttpClient$RequestExecutor.execute(AmazonHttpClient.java:744)
	at com.amazonaws.http.AmazonHttpClient$RequestExecutor.access$500(AmazonHttpClient.java:704)
	at com.amazonaws.http.AmazonHttpClient$RequestExecutionBuilderImpl.execute(AmazonHttpClient.java:686)
	at com.amazonaws.http.AmazonHttpClient.execute(AmazonHttpClient.java:550)
	at com.amazonaws.http.AmazonHttpClient.execute(AmazonHttpClient.java:530)
	at com.amazonaws.services.s3.AmazonS3Client.invoke(AmazonS3Client.java:5443)
	at com.amazonaws.services.s3.AmazonS3Client.invoke(AmazonS3Client.java:5390)
	at com.amazonaws.services.s3.AmazonS3Client.copyObject(AmazonS3Client.java:2071)
	at com.ptc.windchill.objectstorage.amazons3.encryption.S3ContentCopier.copyObject(S3ContentCopier.java:79)
	at com.ptc.windchill.objectstorage.amazons3.contentmover.S3ContentMover.copy(S3ContentMover.java:100)
	at com.ptc.windchill.objectstorage.amazons3.contentmover.S3ContentMover.move(S3ContentMover.java:39)
	at wt.fv.contentmover.RemoteVaultItem.storeRemoteStreamInternal(RemoteVaultItem.java:1059)
	at wt.fv.contentmover.RemoteVaultItem.storeRemoteStream(RemoteVaultItem.java:803)
	at wt.fv.contentmover.RVToRVMover.handleMoveOperation(RVToRVMover.java:142)
	at wt.fv.contentmover.RVToRVMover.move(RVToRVMover.java:114)
	at wt.fv.FvSyncAggregate.syncRemotelyUploadedContent(FvSyncAggregate.java:1459)
	at jdk.internal.reflect.GeneratedMethodAccessor658.invoke(Unknown Source)
	at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
	at java.base/java.lang.reflect.Method.invoke(Method.java:566)
	at wt.queue.QueueEntry.execute(QueueEntry.java:229)
	at wt.queue.ProcessingQueue.execEntry(ProcessingQueue.java:312)
	at wt.queue.ProcessingQueue.execEntries(ProcessingQueue.java:898)
	at wt.queue.PollingQueueThread.run(PollingQueueThread.java:102)
  • Is it possible to configure the VPC-endpoints in a Windchill configuration file?
This is a printer-friendly version of Article 389091 and may be out of date. For the latest version click CS389091