bucket-policy

命令格式

• 添加/修改Bucket Policy配置

  ./ossutil bucket-policy --method put oss://bucket local_json_file [options]

  ossutil从配置文件local_json_file中读取Bucket Policy配置，并在Bucket中添加对应规则。若Bucket已有Bucket Policy配置，新的配置将覆盖原有配置。
  说明 local_json_file是一个Json格式的文件，配置举例如下：

   {
       "Version": "1",
       "Statement": [
           {
               "Effect": "Allow",
               "Action": [
                   "ram:ListObjects"
               ],
               "Principal": [
                   "1234567"
               ],
               "Resource": [
                   "*"
               ],
               "Condition": {}
           }
       ]
  }

• 获取Bucket Policy配置

  ./ossutil bucket-policy --method get oss://bucket [local_json_file] [options]

  local_json_file为文件路径参数。若填写，则将Bucket Policy的配置保存为本地文件；若置空，则将Bucket Policy的配置输出到屏幕上。
• 删除Bucket Policy配置

  ./ossuitl bucket-policy --method delete oss://bucket [options]

使用示例

• 添加Bucket Policy配置，允许指定IP的匿名用户访问Bucket内所有资源

  ./ossutil bucket-policy --method put oss://bucket1 /file/policy.json

  policy.json文件内容为：

  {
  "Version": "1",
  "Statement": [
          {
              "Action": [
                  "oss:*"
              ],
              "Effect": "Allow",
              "Principal": [
                  "*"
             ],
              "Resource": [
                  "acs:oss:*:174649585760****:bucket1",
                  "acs:oss:*:174649585760****:bucket1/*"
              ],
              "Condition": {
                  "IpAddress": {
                      "acs:SourceIp": [
                          "10.10.10.10"
                      ]
                  }
              }
          }
      ]
  }

• 获取Bucket Policy配置

  ./ossutil.exe bucket-policy --method get oss://bucket1
  {
      "Version": "1",
      "Statement": [
          {
              "Action": [
                  "oss:*"
              ],
              "Effect": "Allow",
              "Principal": [
                  "*"
              ],
              "Resource": [
                  "acs:oss:*:174649585760****:bucket1",
                  "acs:oss:*:174649585760****:bucket1/*"
              ],
              "Condition": {
                  "IpAddress": {
                      "acs:SourceIp": [
                          "10.10.10.10"
                      ]
                  }
              }
          }
      ]
  }

• 删除Bucket Policy配置

  ./ossutil.exe bucket-policy --method delete oss://bucket1

常用选项