# 示例：检查AWS S3权限(Python)
import boto3

s3 = boto3.client('s3',
    aws_access_key_id='YOUR_ACCESS_KEY',
    aws_secret_access_key='YOUR_SECRET_KEY'
)

try:
    response = s3.get_object(Bucket='your-bucket', Key='your-file.txt')
    print(response['Body'].read())
except Exception as e:
    print(f"Error: {e}")
    # 检查IAM策略是否正确配置了s3:GetObject权限

// 前端API调用示例
fetch('https://api.example.com/protected', {
  method: 'GET',
  headers: {
    'Authorization': 'Bearer ' + token, // 确保token有效
    'Content-Type': 'application/json'
  }
})
.then(response => {
  if (response.status === 403) {
    // 刷新token或重新认证
  }
})

location /protected/ {
    # 确保没有不必要的deny all
    allow 192.168.1.0/24;
    # allow all; # 测试时临时允许所有
    deny all;
}

// Spring Boot CORS配置示例
@Configuration
public class WebConfig implements WebMvcConfigurer {
    @Override
    public void addCorsMappings(CorsRegistry registry) {
        registry.addMapping("/**")
            .allowedOrigins("*") // 生产环境应更严格
            .allowedMethods("GET", "POST", "PUT", "DELETE");
    }
}