轻量对象存储-资源六段式限制单桶读写权限

原创

发布于 2025-03-31 23:12:43

1870

文章被收录于专栏：个人教程个人教程

例如你有一个叫bu-2025-1200000000的桶，地域是ap-guangzhou，那么策略语法则应该这样设置：

这里面最容易出错的是uid，下面的uid填写的不是账号ID，而是APPID。

策略语法，json格式

{
    "statement": [
        {
            "action": [
                "cos:GetService",
                "cos:GetBucket",
                "cos:ListMultipartUploads",
                "cos:GetObject*",
                "cos:HeadObject",
                "cos:GetBucketObjectVersions",
                "cos:OptionsObject",
                "cos:ListParts",
                "cos:DeleteObject",
                "cos:PostObject",
                "cos:PostObjectRestore",
                "cos:PutObject*",
                "cos:InitiateMultipartUpload",
                "cos:UploadPart",
                "cos:UploadPartCopy",
                "cos:CompleteMultipartUpload",
                "cos:AbortMultipartUpload",
                "cos:DeleteMultipleObjects",
                "cos:AppendObject"
            ],
            "effect": "allow",
            "resource": [
                "qcs::cos:ap-guangzhou:uid/1200000000:bu-2025-1200000000/*"
            ]
        }
    ],
    "version": "2.0"
}

原创声明：本文系作者授权腾讯云开发者社区发表，未经许可，不得转载。

如有侵权，请联系 cloudcommunity@tencent.com 删除。

权限控制