Hi, I have tried to do this twice now and can’t get it to work 100%. In my last attempt I have secondary zone correctly syncing: sudo radosgw-admin sync status realm 2cc7226c-2cce-4b75-a719-97ba22756289 (prod) zonegroup 04702b5e-faa4-4110-9e98-6097f5e5e4b9 (us) zone ece9f510-e910-49be-a89f-7b1f47b3faf8 (zone2) metadata sync syncing full sync: 0/64 shards incremental sync: 64/64 shards metadata is caught up with master data sync source: 8f0e7a41-f71c-45e8-869a-9bfbadbcbf2c (zone1) syncing full sync: 0/128 shards incremental sync: 128/128 shards data is caught up with source but master zone can’t sync from secondary: sudo radosgw-admin sync status realm 2cc7226c-2cce-4b75-a719-97ba22756289 (prod) zonegroup 04702b5e-faa4-4110-9e98-6097f5e5e4b9 (us) zone 8f0e7a41-f71c-45e8-869a-9bfbadbcbf2c (zone1) metadata sync no sync (zone is master) 2019-08-06 16:43:36.228 7f059c7ab640 0 data sync zone:ece9f510 ERROR: failed to fetch datalog info data sync source: ece9f510-e910-49be-a89f-7b1f47b3faf8 (zone2) failed to retrieve sync info: (13) Permission denied I can see in our secondary rgw hosts that there is a 403 from master zone 2019-08-06 16:27:58.137 7ff3f3d30700 1 ====== req done req=0x7ff3f3d298d0 op status=0 http_status=403 latency=0s ====== 2019-08-06 16:27:58.137 7ff3f3d30700 1 civetweb: 0x563d52f64000: 10.130.30.210 - - [06/Aug/2019:16:27:58 -0700] "GET /admin/log?type=data&rgwx-zonegroup=04702b5e-faa4-4110-9e98-6097f5e5e4b9 HTTP/1.1" 403 320 - -