如何签名(Presign)一个AWS S3文件_authorizationqueryparameterserror

import java.io.BufferedReader;
import java.io.FileInputStream;
import java.io.FileNotFoundException;
import java.io.IOException;
import java.io.InputStreamReader;
import java.net.URL;
import java.util.Date;
 
import com.amazonaws.SDKGlobalConfiguration;
import com.amazonaws.auth.WebIdentityTokenCredentialsProvider;
import com.amazonaws.services.s3.AmazonS3;
import com.amazonaws.services.s3.AmazonS3ClientBuilder;
import com.amazonaws.services.s3.model.GeneratePresignedUrlRequest;
 
public class S3Signer{
    static{
        System.setProperty(SDKGlobalConfiguration.ENABLE_S3_SIGV4_SYSTEM_PROPERTY, "true");
    }
 
    public static String generateUrl(AmazonS3 amazonS3, String bucketName, String key) {
        GeneratePresignedUrlRequest urlRequest = new GeneratePresignedUrlRequest(bucketName,key);
        // 1 hour expiration time
        urlRequest.setExpiration(new Date(System.currentTimeMillis() + 1000 * 60 * 60));
        URL url = amazonS3.generatePresignedUrl(urlRequest);
 
        return url.toString();
    }
 
    public static void main(String[] args) {
        String region = args[0];
        String roleArn = args[1];
        String sessionName = args[2];
        String tokenFile = args[3];
 
        String bucketName = args[4];
        String key = args[5];
 
        AmazonS3ClientBuilder builder = AmazonS3ClientBuilder.standard().withRegion(region);
 
        System.out.println("roleArn:"+  roleArn + " tokenFile:" + tokenFile + " sessionName:" + sessionName);
        builder.withCredentials(WebIdentityTokenCredentialsProvider.builder()
            .roleArn(roleArn)
            .webIdentityTokenFile(tokenFile)
            .roleSessionName(sessionName)
            .build());
 
        AmazonS3 s3 = builder.build();
 
        String location = s3.getBucketLocation(bucketName);
        System.out.println("bucket location:" + location + " bucket: " + bucketName);
        s3.putObject(bucketName,"hello.txt", "hello world");
 
        System.out.println(generateUrl(s3, bucketName, key));
 
    }
}

<Error>
 
<Code>AuthorizationQueryParametersError</Code>
 
<Message>X-Amz-Algorithm only supports "AWS4-HMAC-SHA256 and AWS4-ECDSA-P256-SHA256"</Message>
 
<RequestId>EHCHR1687MYQKZZD</RequestId>
 
<HostId>xlywJTkA5oqp/9sA6VaVKqYwGEDKpK2AS5EK2R6DVpioNZUGJS3I97lWFAKAxNVYfHVMCJ4RDZM=</HostId>
 
</Error>

<Error>
<Code>UnauthorizedAccess</Code>
<Message>You are not authorized to perform this operation</Message>
<RequestId>MCRMH7258TQ6ATXG</RequestId>
<HostId>D7WNA1djj5eHh3oA2x6Sj7ef7ke2R3VxX4DyB+uiNsOXQHmQaLI/MzTO/mQqIQ9wWIfi3wyFY8A=</HostId>
</Error>

 kubectl exec  my-application-deplyoment-67f8d677f5-ztw7z env | grep AWS

AWS_REGION=cn-northwest-1
AWS_ROLE_ARN=arn:aws-cn:iam::xxxx:role/my-cluster-addon-iamserviceaccount-al-Role1-abcd
AWS_WEB_IDENTITY_TOKEN_FILE=/var/run/secrets/eks.amazonaws.com/serviceaccount/token
AWS_DEFAULT_REGION=cn-northwest-1