403 Forbidden Error from CloudFront when trying to download a recording

Format Your New Topic as Follows:

API Endpoint(s) and/or Zoom API Event(s)
zoom.us/rec/webhook_download API which is gotten from recording.completed webhook.
Description
When trying to download a recording file from the above API, one of our servers receive 403 Forbidden error from CloudFront.
We have several servers and only one of them receives this error.

Error?
This is the whole of the full request/response message.
(This is a sample recording by our developer, so I’m pasting full url and token.)

< GET /rec/webhook_download/lXVps7vIUC7XFvrOUBmYzFaBsec3s-NEvZI8WrYje2YvFAFmGTqikhYRfWxFqMaRZtGDnfy0UMsbrpa_.X7wYkFR03sOw0CXK/eYSQ3zaWYPwyOTDe1jMAup2aFVxUQ01Od9OFR64oBS3gZ1voGMpn6WFAjh-4Svk.txXZtuuSUd2l1mJR HTTP/1.1
< Host: revcomm-co-jp-tech.zoom.us
< User-Agent: python-requests/2.32.3
< Accept-Encoding: gzip, deflate
< Accept: */*
< Connection: keep-alive
< Authorization: Bearer eyJzdiI6IjAwMDAwMSIsInptX3NrbSI6InptX28ybSIsInR5cCI6IkpXVCIsImFsZyI6IkVTMjU2In0.eyJhdWQiOiJXZWJSZWNEb3dubG9hZCIsImFjY291bnRJZCI6Ik1aMjJza2RWU09ldng4bFN0NkVkeEEiLCJpc3MiOiJFdmVudENvbnN1bWVyUmVjRG93bmxvYWQiLCJtaWQiOiJ4T1Uzc1BZaVE2Mm1rU0xaSTcxUURRPT0iLCJleHAiOjE3MjI2NjQ0MzUsImlhdCI6MTcyMjU3ODAzNSwidXNlcklkIjoiQkR0ekxtTm1USjY1dDkyQk9TQk0zQSJ9.3gT8yRou2VrVx3v-O3wbmMrGZVc1ibcYxXMSrYP2XkwrJ-TIkGoiTmZm8DF1WRqEAJ740prgYBlVb8VTpISFdw
< Content-Type: application/json
< 

> HTTP/1.1 302 Found
> Date: Fri, 02 Aug 2024 05:56:37 GMT
> Content-Length: 0
> Connection: keep-alive
> location: https://ssrweb.zoom.us/replay02/2024/08/02/C4E537B0-F622-43AD-A691-22D923BD500D/GMT20240802-055010_Recording_640x360.mp4?response-content-disposition=attachment&response-content-type=application%2Foctet-stream&response-cache-control=max-age%3D0%2Cs-maxage%3D86400&fid=HZt4lOTiqItij4yrVw1nP8cjZJFhBfSA-eX8BTGNs08cZTRpgJuR2yXUBUV7hI6dgyvOdi3BRLgPsqyL.9k4_wi9On5y5Yo-7&tid=v=2.0;clid=aw1;rid=WEB_450997c7664cee4c9a3e3dfad9c64236&Policy=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_&Signature=F-oPIPKWlmt0jwoAF6D96l3tvlcx8s0-g~KSMcLmhOr5QLQHTH4UALd93aDcXU34l-eo1I~MKqUcU6HbUpu9KTROCG5mLA5wC5qxDU6dcpIUtDa8amfWzmBMDXxiTsfvT-8Bybik~Hmmi18F5ieRxxz0dMjKFgSsn6eLZDcjKI7keAQG0JKtVv775VLHV20wCePD1rEV81z8FyIfDd45R3WxDkqrrvH5p6GD-Ju65daVrKNoKHtHrzyLAw2nl~KbT9SkgBMEI6EzY25ouqAWHAqc3uhEOgB2raMvkhW7yVPmevaq2FHBdD5CpWDn3wh2cSZo7ZFtUNeiaFNdxmB2MA__&Key-Pair-Id=APKAJFHNSLHYCGFYQGIA
> x-zm-trackingid: v=2.0;clid=aw1;rid=WEB_450997c7664cee4c9a3e3dfad9c64236
> x-robots-tag: noindex, nofollow, noarchive
> x-content-type-options: nosniff
> content-security-policy: upgrade-insecure-requests; default-src https://*.zoom.us https://zoom.us blob: 'self'; img-src https: about: blob: data: 'self'; style-src https: safari-extension: chrome-extension: 'unsafe-inline' data: 'self'; font-src https: safari-extension: chrome-extension: blob: data: 'self'; connect-src * about: blob: data: 'self'; media-src * rtmp: blob: data: 'self'; frame-src https: ms-appx-web: zoommtg: zoomus: wvjbscheme: zoomprc: data: blob: 'self'; object-src 'none'; base-uri 'none';
> set-cookie: zm_cluster=aw1; Domain=zoom.us; Path=/; Secure; HttpOnly
> set-cookie: zm_aid=MZ22skdVSOevx8lSt6EdxA; Domain=zoom.us; Path=/; Secure; HttpOnly
> set-cookie: zm_haid=107; Domain=zoom.us; Path=/; Secure; HttpOnly
> set-cookie: cred=B37E978CDE1F7A98B074F1B9282140E2; Path=/; Secure; HttpOnly
> set-cookie: _zm_page_auth=aw1_c_JUBhomtRSB6nQRbQju3rsQ; Domain=zoom.us; Path=/; Secure; HttpOnly
> set-cookie: _zm_ssid=aw1_c_-LxOuY_bTUKMSuwSKkPaLA; Domain=zoom.us; Path=/; Secure; HttpOnly
> set-cookie: _zm_ctaid=; Max-Age=0; Expires=Thu, 01 Jan 1970 00:00:10 GMT; Domain=zoom.us; Path=/; Secure; HttpOnly
> set-cookie: _zm_chtaid=; Max-Age=0; Expires=Thu, 01 Jan 1970 00:00:10 GMT; Domain=zoom.us; Path=/; Secure; HttpOnly
> set-cookie: _zm_lang=jp-JP; Max-Age=31536000; Expires=Sat, 02 Aug 2025 05:56:37 GMT; Domain=zoom.us; Path=/; Secure
> set-cookie: _zm_date_format=yy/mm/dd; Domain=zoom.us; Path=/; Secure
> set-cookie: _zm_mtk_guid=c335ba01030d487d95c7e4f961eca177; Max-Age=63072000; Expires=Sun, 02 Aug 2026 05:56:37 GMT; Domain=zoom.us; Path=/; Secure
> set-cookie: __cf_bm=Sben8FPUwKGtpTQoxRfG98sNQux8TZNCb4lmQqpuPIE-.1.1-p5qokrcwyq3GTdNz_JeutV6dgX915w5x_h96yIbDKmw2_s1693BXAp2kIOzT4zZF7NGCJWAnDFEMNxSjO2p12w; path=/; expires=Fri, 02-Aug-24 06:26:37 GMT; domain=.zoom.us; HttpOnly; Secure; SameSite=None
> x-zm-zoneid: VA2
> strict-transport-security: max-age=31536000; includeSubDomains
> x-xss-protection: 1; mode=block
> referrer-policy: strict-origin-when-cross-origin
> CF-Cache-Status: DYNAMIC
> Report-To: {""endpoints"":[{""url"":""https:\/\/a.nel.cloudflare.com\/report\/v4?s=oQUnoskxkFfwLApwbXYAC21G3oOeKRW%2BV9YXfdNMnVjSp4%2BF3LDHsX6CPU6w%2FpRxyYV58NAasiqbh3LsRBpdCTD5uiLG9KICgpdatCiOlDzGPco8Psyd9L%2By2Wuh3ddfGLTu0u7xh%2B5N0LkH""}],""group"":""cf-nel"",""max_age"":604800}
> NEL: {""success_fraction"":0.01,""report_to"":""cf-nel"",""max_age"":604800}
> Server: cloudflare
> CF-RAY: 8acbd365eb8c5c8b-NRT
> alt-svc: h3="":443""; ma=86400
> 

< GET /replay02/2024/08/02/C4E537B0-F622-43AD-A691-22D923BD500D/GMT20240802-055010_Recording_640x360.mp4?response-content-disposition=attachment&response-content-type=application%2Foctet-stream&response-cache-control=max-age%3D0%2Cs-maxage%3D86400&fid=HZt4lOTiqItij4yrVw1nP8cjZJFhBfSA-eX8BTGNs08cZTRpgJuR2yXUBUV7hI6dgyvOdi3BRLgPsqyL.9k4_wi9On5y5Yo-7&tid=v=2.0;clid=aw1;rid=WEB_450997c7664cee4c9a3e3dfad9c64236&Policy=eyJTdGF0ZW1lbnQiOiBbeyJSZXNvdXJjZSI6Imh0dHBzOi8vc3Nyd2ViLnpvb20udXMvcmVwbGF5MDIvMjAyNC8wOC8wMi9DNEU1MzdCMC1GNjIyLTQzQUQtQTY5MS0yMkQ5MjNCRDUwMEQvR01UMjAyNDA4MDItMDU1MDEwX1JlY29yZGluZ182NDB4MzYwLm1wND9yZXNwb25zZS1jb250ZW50LWRpc3Bvc2l0aW9uPWF0dGFjaG1lbnQmcmVzcG9uc2UtY29udGVudC10eXBlPWFwcGxpY2F0aW9uJTJGb2N0ZXQtc3RyZWFtJnJlc3BvbnNlLWNhY2hlLWNvbnRyb2w9bWF4LWFnZSUzRDAlMkNzLW1heGFnZSUzRDg2NDAwJmZpZD1IWnQ0bE9UaXFJdGlqNHlyVncxblA4Y2paSkZoQmZTQS1lWDhCVEdOczA4Y1pUUnBnSnVSMnlYVUJVVjdoSTZkZ3l2T2RpM0JSTGdQc3F5TC45azRfd2k5T241eTVZby03JnRpZD12PTIuMDtjbGlkPWF3MTtyaWQ9V0VCXzQ1MDk5N2M3NjY0Y2VlNGM5YTNlM2RmYWQ5YzY0MjM2IiwiQ29uZGl0aW9uIjp7IkRhdGVMZXNzVGhhbiI6eyJBV1M6RXBvY2hUaW1lIjoxNzIyNTc4NDk3fX19XX0_&Signature=F-oPIPKWlmt0jwoAF6D96l3tvlcx8s0-g~KSMcLmhOr5QLQHTH4UALd93aDcXU34l-eo1I~MKqUcU6HbUpu9KTROCG5mLA5wC5qxDU6dcpIUtDa8amfWzmBMDXxiTsfvT-8Bybik~Hmmi18F5ieRxxz0dMjKFgSsn6eLZDcjKI7keAQG0JKtVv775VLHV20wCePD1rEV81z8FyIfDd45R3WxDkqrrvH5p6GD-Ju65daVrKNoKHtHrzyLAw2nl~KbT9SkgBMEI6EzY25ouqAWHAqc3uhEOgB2raMvkhW7yVPmevaq2FHBdD5CpWDn3wh2cSZo7ZFtUNeiaFNdxmB2MA__&Key-Pair-Id=APKAJFHNSLHYCGFYQGIA HTTP/1.1
< Host: ssrweb.zoom.us
< User-Agent: python-requests/2.32.3
< Accept-Encoding: gzip, deflate
< Accept: */*
< Connection: keep-alive
< Cookie: zm_cluster=aw1; zm_aid=MZ22skdVSOevx8lSt6EdxA; zm_haid=107; _zm_page_auth=aw1_c_JUBhomtRSB6nQRbQju3rsQ; _zm_ssid=aw1_c_-LxOuY_bTUKMSuwSKkPaLA; _zm_lang=jp-JP; _zm_date_format=yy/mm/dd; _zm_mtk_guid=c335ba01030d487d95c7e4f961eca177; __cf_bm=Sben8FPUwKGtpTQoxRfG98sNQux8TZNCb4lmQqpuPIE-.1.1-p5qokrcwyq3GTdNz_JeutV6dgX915w5x_h96yIbDKmw2_s1693BXAp2kIOzT4zZF7NGCJWAnDFEMNxSjO2p12w
< 

> HTTP/1.1 403 Forbidden
> Server: CloudFront
> Date: Fri, 02 Aug 2024 06:14:05 GMT
> Content-Type: text/xml
> Content-Length: 110
> Connection: keep-alive
> X-Cache: Error from cloudfront
> Via: 1.1 01e4ad03c80c45f7c69bb168f20c9836.cloudfront.net (CloudFront)
> X-Amz-Cf-Pop: NRT20-C1
> X-Amz-Cf-Id: Ey4AnSQLcuZ1QrfLAHOx9DwhdO2eSneatAQIV4Nu9touGEbF6gtXfw==
> 
<?xml version=""1.0"" encoding=""UTF-8""?><Error><Code>AccessDenied</Code><Message>Access denied</Message></Error>"

@elisa.zoom
Could you kindly help us, please?

Hi @tech-zoom_zp
Are you still having this issue?

Yes, we are. We are continuously having this issue since July/17th.

Thanks @tech-zoom_zp
I will go ahead and open a support ticket on your behalf.
You will get a notification email sent to the email address you used to log in to the forum.
Cheers,
Elisa

1 Like