Nuxeo 8.10 cloud binary plugin does not work in all AWS regions. The Amazon S3 plugin that binary manager uses needs to be updated.

NCO cloud states in its SLA that we support DR across all AWS regions. However, the nuxeo binary package that nuxeo app uses does not support certain regions. Here are the details of the issue:

When we run the nuxeo app in the London region, we get the following error when we hit the nuxeo homepage URL:

Exception in thread "main" java.io.IOException: Status Code: 400, AWS Request ID: 53549D33192C9E57, AWS Error Code: InvalidRequest, AWS Error Message: The authorization mechanism you have provided is not supported. Please use AWS4-HMAC-SHA256., S3 Extended Request ID: 2vuOmarrvipVm1qsni4X50/u8yM/6XJiGS3v+Z82Mv5p8DHnabSmJKds+TSOtPCJrz3IkF+c4oQ=
at org.nuxeo.ecm.core.storage.sql.S3BinaryManager.initialize(S3BinaryManager.java:252)

These are the regions where we face the issue above:

• Asia Pacific (Mumbai)
• Asia Pacific (Seoul)
• EU (Frankfurt)
• EU (London)
• China (Beijing)

We are running into this issue because the current S3 plugin ONLY supports Signature Version 2 where as the regions above need Signature Version 4.

In all other Regions, Amazon S3 supports both Signature Version 4 and Signature Version 2.

Please update the aws-java-sdk version that the cloud binary package uses to the latest version so these new regions are supported as per our SLA.

Nuxeo version we are facing this issue in: 8.10
Current AWS S3 plugin being used: 1.1.8
Please upgrade to: 1.11.221

https://mvnrepository.com/artifact/com.amazonaws/aws-java-sdk