The error message indicates that the access is denied for user ‘anonymous user’ (Vserver 50), from client IP 10.10.10.10 accessing resource ‘/offload-target’. This means that the application is not providing a valid user name or access key to authenticate with the ONTAP S3 server. According to the NetApp documentation1, ONTAP S3 server supports both v2 and v4 signatures, but v2 signatures are deprecated and not recommended. Therefore, the application should use v4 signatures to access the ONTAP S3 bucket. Additionally, the application should specify the bucket name in the host name, not in the resource path, as shown in the following example2:

https://bucket-name.s3-server-name.com/object-name

References = 1 ONTAP S3 Server Overview - NetApp Documentation 2 Accessing an ONTAP S3 bucket - NetApp Documentation