ios端构建OSSCallBackRequest使用sts鉴权出现授权失败

错误
Domain=com.aliyun.oss.serverError Code=-403 "(null)" UserInfo={__name=Error, HostId=avatar-dd-david-health-cn.oss-cn-beijing.aliyuncs.com, Message=Access denied by authorizer's policy., Code=AccessDenied, RequestId=5CAF5401591574B055896F7C}
任何sts相关授权



'POLICY' => array(
            'Statement' => array(
                 array(
                    'Action' => array(
                        "oss:*"
                    ),
                    'Effect' => 'Allow',
                    'Resource' => array(
                        'acs:oss:*:*:xx/*'
                    )
                )
            ),
            "Version" => "1"
        )


这样是可以发送OSSCallBackRequest请求,否所任何action均会 出现授权问题,请问什么情况啊