Suomi NRT Not accessible

[tisham_csiro]

Suomi NPP NRT Granule is listed as available in STAC but cannot be downloaded via the DAAC even after supplying credentials. I get status code 403

https://oceandata.sci.gsfc.nasa.gov/getfile/SNPP_VIIRS.20240526T024801.L2.OC.NRT.nc

Could you please verify this Granule is correct and present. Is there plans to migrate this to OB_CLOUD, or all of the VIIRS collections ?

Stac browser marks it as present : https://radiantearth.github.io/stac-browser/#/external/cmr.earthdata.nasa.gov/stac/OB_DAAC/collections/VIIRSN_L2_OC_NRT_R2022.0/items/R2022.0_VIIRSN_L2_OC_NRT_SNPP_VIIRS.20240526T024801.L2.OC.NRT.nc?.language=en&.asset=asset-nrt

[OB.DAAC-EDL - amscott]

Hello,

We have just migrated a large amount of data to Earthdata cloud. This changes the data provider name from OB_DAAC to OB_CLOUD. Please reference STAC records from OB_CLOUD for VIIRS SNPP data, as we have completed migration of this mission to the cloud. This means the data will no longer be available via OB_DAAC provider name since it has transitioned to OB_CLOUD provider name. Let us know if you have further questions:
https://search.earthdata.nasa.gov/search/granules?p=C3388381281-OB_CLOUD&pg[0][v]=f&pg[0][gsk]=-start_date&q=viirsn_l2_oc_nrt&tl=1537189898.254!5!!

[tisham_csiro]

As indicated in another thread some of the data in OB_CLOUD has access issues from same-region S3 endpoint. Hence having them available via OB_DAAC while cloud access stabilizes is beneficial.

[OB.DAAC - amscott]

Once the data are migrated over, they WILL NOT be available from OB_DAAC so that isn't an error.

Please share what issues you are seeing with OB_CLOUD data endpoints so we can help resolve that problem.

[tisham_csiro]

Please see OB-Cloud access issue with signed URL's that are returned as redirect with fetching the STAC item using authentication headers.

https://ob-cumulus-prod-public.s3.us-west-2.amazonaws.com/JPSS2_VIIRS.20250801T021800.L2.OC.NRT.nc?A-userid=tisham_csiro&X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=ASIATCIYRXSXV3JVR6OZ/20250902/us-west-2/s3/aws4_request&X-Amz-Date=20250902T065547Z&X-Amz-Expires=3596&X-Amz-Security-Token=FwoGZXIvYXdzEND//////////wEaDJKp23sWWFabiGkYXyK7Abo2rhjjdZZX2Afq6Nz4F2Jo%2B2rxy2dK7jHC3/GauUEqctMsvXZ0GgmyoJ8fEi/g8E%2BEUrVZDA959wgu2MOH5e%2BbjPSY3qYsFYW1q8WE288hmVaGY1ewVmEry83pW95Y%2BAfZrMgKXMGw7MuShOEGXJkAO6NQ7whwgeaVH4bwqdsUaDyVel3GbDSM0oWJjHjgR8lXN%2BLa7U4qudLkpIR7DThyi/6g/sISQT%2BM1ZgT1HcQMU83N4IxBRX9fhwo76naxQYyLRxbUHIW0jk6sZqDN7NHlbYtuki%2By6VStcBPWnLFzpDd37U8ATnigU0LXMHRKA%3D%3D&X-Amz-SignedHeaders=host&X-Amz-Signature=db415d1053693e6d656c3224fa38ee3245065c98aaf85a61ce53e91ecc1cecb5

This returns :

<Error>
<Code>AccessDenied</Code>
<Message>User: arn:aws:sts::211041762479:assumed-role/ob-cumulus-prod-thin-egress-app-DownloadRoleInRegion/tisham_csiro@1756796143 is not authorized to perform: s3:GetObject on resource: "arn:aws:s3:::ob-cumulus-prod-public/JPSS2_VIIRS.20250801T021800.L2.OC.NRT.nc" because no identity-based policy allows the s3:GetObject action</Message>
<RequestId>KGA3GYEK9GDQSTV4</RequestId>
<HostId>IVEVfjaJhoRSEwM10rntzurL+RBkh6/nAcwkLlX3uvNsOHqadKuSvRkZkXmlXIgtcd8Or1vkwmk=</HostId>
</Error>

[OB.DAAC-EDL - amscott]

Thank you for reporting. Please stand by while we try to replicate this issue.