What do I do if the "Request denied because this instance can only be accessed from the binded VPC" error message is returned when I use a Tablestore SDK to access Tablestore?

Problem description

The "Request denied because this instance can only be accessed from the binded VPC" error message is returned when I use a Tablestore SDK to access the resources in a Tablestore instance. Sample error:

[ErrorCode]:OTSAuthFailed, [Message]:Request denied because this instance can only be accessed from the binded VPC., [RequestId]:XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX, [TraceId]:XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX, [HttpStatus:]403

Cause

After you set the Access Type parameter to Bound VPCs or Tablestore Console or Bound VPCs for a Tablestore instance, you must bind a VPC to the instance and make sure that the instance and the client reside in the same VPC and you use a VPC address to access the Tablestore instance.

Solution

1. Check the ACL of the instance and view information of the VPCs that are bound to the instance.

   1. Log on to the Tablestore console.

   2. On the Overview page, click the name of the instance that you want to manage or click Manage Instance in the Actions column.

   3. On the Instance Management page, click the Network Management tab and view the VPCs that are bound to the instance.

      If no VPC is bound to the instance, bind an VPC to the instance. For more information, see Bind a VPC to a Tablestore instance.

2. Check the network type of the client and make sure that the client resides in a VPC that is bound to the instance.

   Note

   You can create an Elastic Compute Service (ECS) instance in the VPC and use a Tablestore SDK to access the resources in the Tablestore instance from the ECS instance by using a VPC address.

3. Check the address of the Tablestore instance that is specified in the SDK request. Only a VPC address can be used to access the Tablestore instance.

   You can use the VPC address of an instance or the VPC addresses of the VPCs that are bound to an instance to access the instance. The following table describes how to view the VPC addresses.

   VPC address	Description

   VPC address	Description
   Instance	Log on to the Tablestore console. On the Overview page, click the name of the instance that you want to manage or click Manage Instance in the Actions column. In the Instance Access URL section of the Instance Details tab, view the VPC address of the instance.
   Bound VPCs	Log on to the Tablestore console. On the Overview page, click the name of the instance that you want to manage or click Manage Instance in the Actions column. On the Instance Management page, click the Network Management tab. In the VPCs list, view the VPC addresses of the bound VPCs.