I am using AWS Cognito User Pool Hosted Classic UI in ca-west-1. I have uploaded a logo through the console. As expected, on the cognito hosted login page, there is now a “logo” section at the top. However, the logo does not load — the logo request returns an HTTP 403. On the login page, I see the word “logo” where the logo should appear.

I made sure that the file size is less than the limit (my file is 271 bytes) and a valid format (it is a jpg).

Through my login page and when I attempt to download the logo from the AWS console, I get what looks like a standard S3 403 error:

<Error>
<Code>AccessDenied</Code>
<Message>Access Denied</Message>
<RequestId>XXXXXXXXXXXXXXXX</RequestId>
<HostId>
xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx=
</HostId>
</Error>

In my browser network tab when I go to the login page, I see it is attempting to load the logo but it gets an HTTP 403.

How would I go about troubleshooting this?

Some ideas:

• try it in a different region and see if it still happens there (maybe it’s just a problem with the new ca-west-1 region?)
• pay $30 for AWS support and ask for their help
• ???