Destination bucket
diff --git a/docs/obs/umn/obs_03_0020.html b/docs/obs/umn/obs_03_0020.html
index 0bacd9c9e..8246e192e 100644
--- a/docs/obs/umn/obs_03_0020.html
+++ b/docs/obs/umn/obs_03_0020.html
@@ -4,7 +4,7 @@
Cloud Trace Service (CTS) records operations on cloud resources in your account. You can use the records to perform security analysis, track resource changes, audit compliance, and locate faults.
After you enable CTS and configure a tracker, CTS can record management and data traces of OBS for auditing.
Figure 1 CTS
- Procedure- Log in to the management console.
- In the upper left corner of the top navigation menu, click
 to select a region and project. - Then choose Service List > Management & Deployment > Cloud Trace Service. The Trace List page is displayed.
- For details about how to enable CTS, see Enabling CTS in the CTS User Guide.
+ Procedure- Log in to the management console.
- In the upper left corner of the top navigation menu, click to select a region and then project.
- Then choose Service List > Management & Deployment > Cloud Trace Service. The Trace List page is displayed.
- For details about how to enable CTS, see Enabling CTS in the CTS User Guide.
Table 1 OBS management operations logged by CTSTracker Type
|
diff --git a/docs/obs/umn/obs_03_0032.html b/docs/obs/umn/obs_03_0032.html
index 975ad4c03..a7044a090 100644
--- a/docs/obs/umn/obs_03_0032.html
+++ b/docs/obs/umn/obs_03_0032.html
@@ -1,9 +1,8 @@
Configuring a User-Defined Domain Name
-Procedure- In the bucket list, click the bucket you want to operate. The Overview page of the bucket is displayed.
- In the navigation pane, choose Domain Name Mgmt.
- Click Bind User Domain Name. In the displayed dialog box, enter the domain name to configure, as shown in Figure 1.
The suffix of a user-defined domain name can contain 2 to 6 uppercase or lowercase letters.
+Procedure- In the bucket list, click the bucket you want to operate. The Overview page is displayed.
- In the navigation pane, choose Domain Name Mgmt.
- Click Bind User Domain Name. In the displayed dialog box, enter the domain name to configure, as shown in Figure 1.
The suffix of a user-defined domain name can contain 2 to 6 uppercase or lowercase letters.
Figure 1 Binding a user domain name
-
- Click OK.
- Configure a CNAME record on the DNS, and map the user-defined domain name (for example, example.com) to the domain name of the bucket.
The CNAME configuration varies depending on DNS providers. For details, contact your DNS provider.
diff --git a/docs/obs/umn/obs_03_0035.html b/docs/obs/umn/obs_03_0035.html
index c3d229d25..f8dffce7f 100644
--- a/docs/obs/umn/obs_03_0035.html
+++ b/docs/obs/umn/obs_03_0035.html
@@ -7,36 +7,36 @@
Procedure- Log in to the management console with your account.
- On the top menu bar, choose Service List > Management & Deployment > Identity and Access Management. The IAM console is displayed.
- Create a user group and assign OBS permissions to it.
A user group is a collection of users. By assigning permissions to a user group, you assign permissions to the users in this group. After you create an IAM user, add it to one or more user groups, so that it can inherit the permissions from the groups. - In the navigation pane, choose User Groups. The User Groups page is displayed.
- Click Create User Group.
- Enter a user group name and click OK.
The user group is displayed in the user group list once the creation is complete.
- Locate the user group you created and click Modify in the Operation column of the row.
- In the Group Permissions area, locate OBS (S3), click Attach Policy in the Operation column, select the policy name, and click OK.
 In the Policy Information area, you can view the details about the policy.
- Due to data caching, an RBAC policy and fine-grained policy involving OBS actions will take effect 10 to 15 minutes after it is attached to a user and user group.
+ Due to data caching, an RBAC policy or a fine-grained policy involving OBS actions will take effect 10 to 15 minutes after it is attached to a user or a user group.
- Create a user.
- In the navigation pane, choose Users. The Users page is displayed.
- Click Create User.
- Set user information and click Next.
-
Table 1 User parametersParameter
+Table 1 User parametersParameter
|
-Description
+ | Description
|
|---|
-Username
+ | Username
|
-The user name for logging in to the cloud service.
+ | The user name for logging in to the cloud service.
|
-Credential Type
+ | Credential Type
|
-A credential refers to the identity credential used for user system authentication. In this example, password is selected. - Password: Used for accessing cloud services using the console or development tools.
- Access key: Used for logging to the cloud service using development tools. This credential type is more secure, and is recommended if the user does not need to use the console.
+ A credential refers to the identity credential used for user system authentication. In this example, password is selected. - Password: Used for accessing cloud services using the console or development tools.
- Access key: Used for logging to the cloud service using development tools. This credential type is more secure, and is recommended if the user does not need to use the console.
|
|
-User Groups
+ | User Groups
|
-You can add a user to one or more user groups. Then the user will inherit the permissions granted to these user groups. The default user group admin has the administrator permissions and all of the permissions required to use all cloud resources.
+ | You can add a user to one or more user groups. Then the user will inherit the permissions granted to these user groups. The default user group admin has the administrator permissions and all of the permissions required to use all cloud resources.
|
-Description
+ | Description
|
-(Optional) Brief description about the user.
+ | (Optional) Brief description about the user.
|
diff --git a/docs/obs/umn/obs_03_0037.html b/docs/obs/umn/obs_03_0037.html
index fb670f214..1a2d38329 100644
--- a/docs/obs/umn/obs_03_0037.html
+++ b/docs/obs/umn/obs_03_0037.html
@@ -1,7 +1,7 @@
Creating an IAM Agency
-To use some OBS features, such as cross-region replication, you need to use IAM agencies to grant required permissions to OBS for processing your data.
+ To use some OBS features, you need to use IAM agencies to grant required permissions to OBS for processing your data.
Creating an Agency for Cross-Region Replication- In the Create Cross-Region Replication Rule dialog box on OBS Console, click Create IAM agencies to jump to the Agencies page on the IAM console.
- Click Create Agency to create an agency.
- Enter an agency name.
- Select Cloud service for the Agency Type.
- Select Object Storage Service (OBS) for Cloud Service.
- Set a validity period.
- In the Permissions area, select Project View, locate Global service [Global], and click Modify Permissions in the Operation column. The Modify Permissions window is displayed.
- Click Select Policy/Role in the Operation column of the row where Global service [Global] is displayed. Search for Tenant Administrator and check the box next to it, and click OK.
- (Optional) If Replicate KMS encrypted objects is selected when configuring the cross-region replication rule, the KMS Administrator policy set must be configured in the regions where the source bucket and destination bucket are located.
- Click Modify Permissions in the row of the region where the source/destination bucket resides. The Modify Permissions dialog box is displayed.
- Click Select Policy/Role in the row of the region where the source/destination bucket resides. The Select Policy/Role dialog box is displayed.
- Search for KMS and check the box next to the KMS Administrator policy set.
- Click OK.
- Click OK to complete the agency creation.
diff --git a/docs/obs/umn/obs_03_0040.html b/docs/obs/umn/obs_03_0040.html
index 2a952f7ac..3d907cd4c 100644
--- a/docs/obs/umn/obs_03_0040.html
+++ b/docs/obs/umn/obs_03_0040.html
@@ -1,7 +1,7 @@
What Can I Do with Tags?
- If you add tags to a bucket, charging data records (CDRs) generated by the requests for this bucket will be added with these tags, so that you can use the tags to classify CDRs for detailed cost analysis. For example, if a running application uploads data to a bucket, you can tag the bucket with the application name. In this manner, the costs on the application can be analyzed using tags on CDRs.
+ If you add tags to a bucket, service detail records (SDRs) generated for it will be labeled with these tags. You can classify SDRs by tag for cost analysis. For example, if you have an application that uploads its running data to a bucket, you can tag the bucket with the application name. In this manner, the costs on the application can be analyzed using tags in SDRs.
diff --git a/docs/obs/umn/obs_03_0046.html b/docs/obs/umn/obs_03_0046.html
index 4bf5143fb..ceee70618 100644
--- a/docs/obs/umn/obs_03_0046.html
+++ b/docs/obs/umn/obs_03_0046.html
@@ -1,19 +1,19 @@
Sharing an Object
- ScenariosYou can allow anyone to access your file stored in OBS by sharing the temporary URL of the file.
+ ScenariosYou can share temporary URLs of your objects with others for them to access your objects stored in OBS.
- Background InformationFile sharing is temporary. All shared URLs are temporary with a validity period.
+ Background InformationFile sharing is temporary. All sharing URLs are only valid for a limited period of time.
A temporary URL consists of the access domain name and the temporary authentication information of a file.
The temporary authentication information contains the AccessKeyId, Expires, x-obs-security-token, and Signature parameters. AccessKeyId, x-obs-security-token, and Signature are used for authentication. The Expires parameter specifies the validity period of the authentication.
After an object is shared on OBS Console, the system will generate a URL that contains the temporary authentication information, valid for five minutes since its generation by default. Each time you change the validity period of a URL, OBS obtains the authentication information again to generate a new URL for sharing, which takes effect since the time when the validity period is changed.
Limitations and Constraints- An object shared from OBS Console can be valid for one minute to 18 hours. If you need a longer validity period for a shared object, use the client tool OBS Browser+ that supports a validity period from one minute to 30 days. Or, you can configure a bucket policy or object policy to grant the access permissions of an object to other users permanently.
- Only buckets of version 3.0 support file sharing. You can view the bucket version in the Basic Information area on the Overview page of a bucket.
- Encrypted objects cannot be shared.
- To share a cold object, restore it first.
- Procedure- In the bucket list, click the bucket you want to operate. The Overview page of the bucket is displayed.
- In the navigation pane, choose Objects.
- Locate the file to be shared and click Share in the Operation column. The dialog box as given in Figure 1 is displayed.
Once the Share File dialog box is opened, the URL is effective and valid for five minutes by default. If you change the validity period, the authentication information in the URL changes accordingly, and the URL's new validity period starts upon the change.
-Figure 1 Sharing a file
+Procedure- In the bucket list, click the bucket you want to operate. The Overview page is displayed.
- In the navigation pane, choose Objects.
- Locate the file to be shared and click Share in the Operation column.
Once the Share File dialog box is opened, the URL is effective and valid for five minutes by default. If you change the validity period, the authentication information in the URL changes accordingly, and the URL's new validity period starts upon the change.
+Figure 1 Sharing a file
- Operate the URL as follows:
- Click Open URL to preview the file on a new page or directly download it to your default download path.
- Click Copy Link to share the link to others for them to access this file using a browser.
- Click Copy Path to share the file path to users who have access permissions to the bucket. The users then can search for the file by pasting the shared path to the search box of the bucket.
- Within the validity period of a URL, any user who has the URL can access the file.
+ Within the URL validity period, anyone who has the URL can access the file.
diff --git a/docs/obs/umn/obs_03_0051.html b/docs/obs/umn/obs_03_0051.html
index 9406a4293..6fdf0d761 100644
--- a/docs/obs/umn/obs_03_0051.html
+++ b/docs/obs/umn/obs_03_0051.html
@@ -39,32 +39,32 @@
DeleteBucket
|
- Deletes the bucket.
+ | Deletes a bucket.
|
ListBucket
|
-Lists objects in the bucket, and gets the bucket metadata.
+ | Lists objects in a bucket, and obtains the bucket metadata.
|
ListBucketVersions
|
-Lists object versions in the bucket.
+ | Lists versioned objects in a bucket.
|
ListBucketMultipartUploads
|
-Lists multipart upload tasks.
+ | Lists multipart uploads.
|
GetBucketAcl
|
-Obtains the ACL information of the bucket.
+ | Obtains the bucket ACL information.
|
PutBucketAcl
|
-Configures the ACL for the bucket.
+ | Configures a bucket ACL.
|
GetBucketCORS
@@ -74,12 +74,12 @@
|
PutBucketCORS
|
-Configures CORS for the bucket.
+ | Configures CORS for a bucket.
|
GetBucketVersioning
|
-Obtains the versioning information of a bucket.
+ | Obtains the bucket versioning information.
|
PutBucketVersioning
@@ -104,7 +104,7 @@
|
GetBucketWebsite
|
-Obtains the static website configuration information about the bucket.
+ | Obtains the static website configuration of the bucket.
|
PutBucketWebsite
@@ -114,7 +114,7 @@
|
DeleteBucketWebsite
|
-Cancels the static website hosting configuration of the bucket.
+ | Deletes the static website hosting configuration of the bucket.
|
GetLifecycleConfiguration
@@ -124,7 +124,7 @@
|
PutLifecycleConfiguration
|
-Configures a lifecycle rule for the bucket.
+ | Configures a lifecycle rule for a bucket.
|
@@ -191,7 +191,7 @@
PutObjectAcl
|
-Configures the ACL for an object.
+ | Configures an object ACL.
|
PutObjectVersionAcl
diff --git a/docs/obs/umn/obs_03_0075.html b/docs/obs/umn/obs_03_0075.html
index c0a346e7e..aba22a04f 100644
--- a/docs/obs/umn/obs_03_0075.html
+++ b/docs/obs/umn/obs_03_0075.html
@@ -2,7 +2,7 @@
Configuring an Object Policy
Object policies are applied to the objects in a bucket. With an object policy, you can configure conditions and actions for objects in a bucket.
- Procedure- In the bucket list, click the bucket you want to operate. The Overview page of the bucket is displayed.
- In the navigation pane, choose Objects.
- On the right of the object to be operated, choose More > Configure Object Policy. The Configure Object Policy dialog box is displayed.
- Select a proper policy mode as required. Valid options are as follows:
- Read-only mode: The authorized user has the read permission to the object. For follow-up procedure, see 5.
- Read and write mode: The authorized user has the read and write permissions to the object. For follow-up procedure, see 5.
- Customized: The authorized user will be granted with customized permissions to the object. For detailed configuration, see 6.
+Procedure- In the bucket list, click the bucket you want to operate. The Overview page is displayed.
- In the navigation pane, choose Objects.
- On the right of the object to be operated, choose More > Configure Object Policy. The Configure Object Policy dialog box is displayed.
- Select a proper policy mode as required. Valid options are as follows:
- Read-only: The authorized user has the read permission on the object. For follow-up procedure, see 5.
- Read and write: The authorized user has the read and write permissions on the object. For follow-up procedure, see 5.
- Customized: The authorized user has the customized permissions on the object. For detailed configuration, see 6.
You can configure only one object policy at a time.
- For read-only and read and write modes, enter information about the authorized user in the following format and click OK.
Figure 1 Parameter settings of an object policy in the read-only or read and write mode
@@ -29,7 +29,7 @@
Include or Exclude
|
Resources on which the object policy takes effect.
-- Include: The policy takes effect on specified OBS resources.
- Exclude: The policy takes effect on all OBS resources except the specified ones.
+- Include: The policy takes effect on the specified OBS resources.
- Exclude: The policy takes effect on all OBS resources except the specified ones.
|
|
@@ -67,7 +67,7 @@
|
Resources on which the object policy takes effect.
-- Include: The policy takes effect on specified OBS resources.
- Exclude: The policy takes effect on all OBS resources except the specified ones.
+- Include: The policy takes effect on the specified OBS resources.
- Exclude: The policy takes effect on all OBS resources except the specified ones.
|
Actions
@@ -80,7 +80,7 @@
|
Conditions
|
-- Condition Operator: For details, see Table 1.
- Key: For details, see Table 2 and Table 4.
- Value: The entered value is associated with the key.
+ | - Condition Operator: See Table 1.
- Key: See Table 2 and Table 4.
- Value: The entered value is associated with the key.
|
Condition for an object policy to take effect.
|
diff --git a/docs/obs/umn/obs_03_0080.html b/docs/obs/umn/obs_03_0080.html
index 29b715377..b903c7176 100644
--- a/docs/obs/umn/obs_03_0080.html
+++ b/docs/obs/umn/obs_03_0080.html
@@ -2,9 +2,9 @@
Granting an IAM User with the Operation Permissions for a Specified Bucket
Create an IAM user under in an account. The IAM user has no permission to any resource before it is added to any user group. The bucket owner (root account) or other accounts and IAM users, who have the permission to set bucket policies, can configure bucket policies to grant the bucket operation permissions to IAM users.
- The following is an example about how to authorize an IAM user with the bucket access and object upload permissions.
- Procedure- In the bucket list, click the bucket you want to operate. The Overview page of the bucket is displayed.
- In the navigation pane, choose Permissions.
- Choose Bucket Policies > Custom Bucket Policies.
- Click Create Bucket Policy. The Create Bucket Policy dialog box is displayed.
- Set the following parameters to authorize the IAM user with the permission to access the bucket (listing objects in the bucket).
- Table 1 Parameters for authorizing the permission to access a specified bucketParameter
+The following is an example about how to grant an IAM user the bucket access and object upload permissions.
+Procedure- In the bucket list, click the bucket you want to operate. The Overview page is displayed.
- In the navigation pane, choose Permissions.
- Choose Bucket Policies > Custom Bucket Policies.
- Click Create Bucket Policy. The Create Bucket Policy dialog box is displayed.
- Configure parameters listed in the table below to grant an IAM user the permission to access the bucket (listing objects in the bucket).
+ Table 1 Parameters for granting permission to access a bucketParameter
|
Value
|
@@ -38,10 +38,10 @@
|---|
- Click OK.
- Click Create Bucket Policy. The Create Bucket Policy dialog box is displayed.
- Set the following parameters to authorize the IAM user with the permission to upload objects to the bucket.
Before authorizing the IAM user with the permission to operate objects, ensure that the user has the permission to access the bucket.
+ - Click OK.
- Click Create Bucket Policy. The Create Bucket Policy dialog box is displayed.
- Configure parameters in the table below to grant an IAM user the permission to upload objects to a bucket.
Before authorizing the IAM user with the permission to operate objects, ensure that the user has the permission to access the bucket.
-Table 2 Parameters for authorizing the permission to upload objectsParameter
+Table 2 Parameters for granting permission to upload objectsParameter
|
Value
|
diff --git a/docs/obs/umn/obs_03_0081.html b/docs/obs/umn/obs_03_0081.html
index ea01f2bba..5d5b25993 100644
--- a/docs/obs/umn/obs_03_0081.html
+++ b/docs/obs/umn/obs_03_0081.html
@@ -7,8 +7,8 @@
- Configure a bucket policy to allow IAM users to access the bucket.
- Configure IAM policies for the account to which the authorized IAM user belongs, to allow the IAM user to access the bucket.
Only permissions that are allowed by both the bucket policy and IAM policies can take effect.
-Procedure- In the bucket list, click the bucket you want to operate. The Overview page of the bucket is displayed.
- In the navigation pane, choose Permissions.
- Choose Bucket Policies > Custom Bucket Policies.
- Click Create Bucket Policy. The Create Bucket Policy dialog box is displayed.
- Set the following parameters to authorize another account with the permission to access the bucket:
- Table 1 Parameters for authorizing the permission to access a specified bucketParameter
+Procedure- In the bucket list, click the bucket you want to operate. The Overview page is displayed.
- In the navigation pane, choose Permissions.
- Choose Bucket Policies > Custom Bucket Policies.
- Click Create Bucket Policy. The Create Bucket Policy dialog box is displayed.
- Set the following parameters to authorize another account with the permission to access the bucket:
+ Table 1 Parameters for granting permission to access a bucketParameter
|
Value
|
@@ -46,7 +46,7 @@
- Click OK.
- Click Create Bucket Policy. The Create Bucket Policy dialog box is displayed.
- Set the following parameters to authorize another account with the permission to upload objects:
Before authorizing the user with the permission to operate objects, ensure that the user has the permission to access the bucket.
-Table 2 Parameters for authorizing the permission to upload objectsParameter
+Table 2 Parameters for granting permission to upload objectsParameter
|
Value
|
diff --git a/docs/obs/umn/obs_03_0088.html b/docs/obs/umn/obs_03_0088.html
index 477b0d8c1..2e13b15fe 100644
--- a/docs/obs/umn/obs_03_0088.html
+++ b/docs/obs/umn/obs_03_0088.html
@@ -4,10 +4,10 @@
OBS allows you to configure default encryption for a bucket. After the configuration, objects uploaded to this bucket are automatically encrypted using the specified KMS key, making data storage more secure.
You can enable default encryption when creating a bucket (see Creating a Bucket), or enable or disable default encryption after a bucket is created.
OBS encrypts only the objects uploaded after the default encryption is enabled, and does not encrypt those uploaded before. After default encryption is disabled, the encryption status of existing objects keeps unchanged, and you can still manually encrypt objects upon upload.
- Enabling Default Encryption for a Bucket- In the bucket list, click the bucket you want to operate. The Overview page of the bucket is displayed.
- In the right Basic Configurations area, click Default Encryption. The Default Encryption dialog box is displayed.
- Select Enable.
Key obs/default is selected by default for KMS encryption. You can also click Create KMS Key to switch to the management console of KMS and create customer master keys. Then back to OBS Console and select the key from the drop-down list box for KMS encryption.
+Enabling Default Encryption for a Bucket- In the bucket list, click the bucket you want to operate. The Overview page is displayed.
- In the right Basic Configurations area, click Default Encryption. The Default Encryption dialog box is displayed.
- Select Enable.
Key obs/default is selected by default for KMS encryption. You can also click Create KMS Key to switch to the KMS management console and create a customer master key. Then go back to OBS Console and select the key from the drop-down list.
- Click OK.
Disabling Default Encryption for a Bucket- In the bucket list, click the bucket you want to operate. The Overview page of the bucket is displayed.
- In the right Basic Configurations area, click Default Encryption. The Default Encryption dialog box is displayed.
- Select Disable.
- Click OK.
+ Disabling Default Encryption for a Bucket- In the bucket list, click the bucket you want to operate. The Overview page is displayed.
- In the right Basic Configurations area, click Default Encryption. The Default Encryption dialog box is displayed.
- Select Disable.
- Click OK.
diff --git a/docs/obs/umn/obs_03_0096.html b/docs/obs/umn/obs_03_0096.html
index bd0f295c2..ff49efb74 100644
--- a/docs/obs/umn/obs_03_0096.html
+++ b/docs/obs/umn/obs_03_0096.html
@@ -2,8 +2,8 @@
Authorizing Folder Access Permissions to Anonymous Users
If all objects in a folder need to be accessible to anonymous users, you can configure a bucket policy or an object policy to grant anonymous users the permission to access the folder. In this example, a bucket policy is used. If you want to use an object policy to authorize the permission, select the target folder and configure the object policy directly. Parameters are the same as those in the bucket policy.
- Procedure- In the bucket list, click the bucket you want to operate. The Overview page of the bucket is displayed.
- In the navigation pane, choose Permissions.
- Choose Bucket Policies > Custom Bucket Policies.
- Click Create Bucket Policy. The Create Bucket Policy dialog box is displayed.
- Configure parameters according to the following table, so that you can grant anonymous users the permission to access the folder and objects in it:
- Table 1 Parameters for authorizing the permission to access a specified bucketParameter
+Procedure- In the bucket list, click the bucket you want to operate. The Overview page is displayed.
- In the navigation pane, choose Permissions.
- Choose Bucket Policies > Custom Bucket Policies.
- Click Create Bucket Policy. The Create Bucket Policy dialog box is displayed.
- Configure parameters according to the following table, so that you can grant anonymous users the permission to access the folder and objects in it:
+ Table 1 Parameters for granting permission to access a bucketParameter
|
Value
|
@@ -39,7 +39,7 @@
- Click OK.
-Verification- After the permission is successfully configured, select an object in the folder and click the object name to view its details. The object link (URL) is displayed on the details page. Share the URL over the Internet, so that all users can access or download the object through the Internet.
- An anonymous user can view the object by copying the URL of the object to the web browser.
+ Verification- After the permission is successfully configured, select an object in the folder and click the object name to view its details. The object link (URL) is displayed on the details page. Share the URL over the Internet, so that all users can access or download the object through the Internet.
- An anonymous user can use the URL to access the object in a browser.
diff --git a/docs/obs/umn/obs_03_0100.html b/docs/obs/umn/obs_03_0100.html
index be42f9cff..c98899a7c 100644
--- a/docs/obs/umn/obs_03_0100.html
+++ b/docs/obs/umn/obs_03_0100.html
@@ -1,8 +1,8 @@
What Are Factors that Affect the Upload and Download Speed of OBS?
- The OBS upload and download speed may be affected by:
- - Bandwidth limit of OBS itself
- Bandwidth of the internet or intranet
+ The OBS upload and download speed may be affected by:
+ - Upper limit of the read/write bandwidth allowed by a single account
- Disk I/O, NICs, and resources consumed by other processes
diff --git a/docs/obs/umn/obs_03_0118.html b/docs/obs/umn/obs_03_0118.html
index 53c548639..8e1ec2044 100644
--- a/docs/obs/umn/obs_03_0118.html
+++ b/docs/obs/umn/obs_03_0118.html
@@ -3,7 +3,7 @@
Resources
The resource can be the current entire bucket, an object, or a set of objects in the bucket.
Resources can be specified in either of the following ways:
- - Include: The policy takes effect on specified OBS resources.
- Exclude: The policy takes effect on all OBS resources except the specified ones.
+ - Include: The policy takes effect on the specified OBS resources.
- Exclude: The policy takes effect on all OBS resources except the specified ones.
Specifying Bucket ResourcesTo specify the current bucket as the resource, keep the resource text box empty. When configuring actions for the policy, select bucket related actions.
Specifying Object ResourcesWhen objects in the bucket are specified as the resources, actions configured in the bucket policy must be object related actions. The following are examples of how to specify objects as resources.
diff --git a/docs/obs/umn/obs_03_0122.html b/docs/obs/umn/obs_03_0122.html
index d594bdead..4dca8a4de 100644
--- a/docs/obs/umn/obs_03_0122.html
+++ b/docs/obs/umn/obs_03_0122.html
@@ -5,36 +5,36 @@
Procedure- Log in to the management console with your account.
- On the top menu bar, choose Service List > Management & Deployment > Identity and Access Management. The IAM console is displayed.
- Create a user group and assign OBS permissions to it.
A user group is a collection of users. By assigning permissions to a user group, you assign permissions to the users in this group. After you create an IAM user, add it to one or more user groups, so that it can inherit the permissions from the groups. - In the navigation pane, choose User Groups. The User Groups page is displayed.
- Click Create User Group.
- Enter a user group name and click OK.
The user group is displayed in the user group list once the creation is complete.
- Locate the user group you created and click Modify in the Operation column of the row.
- In the Group Permissions area, locate OBS (S3), click Attach Policy in the Operation column, select the policy name, and click OK.
In the Policy Information area, you can view the details about the policy.
- Due to data caching, an RBAC policy and fine-grained policy involving OBS actions will take effect 10 to 15 minutes after it is attached to a user and user group.
+ Due to data caching, an RBAC policy or a fine-grained policy involving OBS actions will take effect 10 to 15 minutes after it is attached to a user or a user group.
- Create a user.
- In the navigation pane, choose Users. The Users page is displayed.
- Click Create User.
- Set user information and click Next.
-
Table 1 User parametersParameter
+Table 1 User parametersParameter
|
-Description
+ | Description
|
|---|
-Username
+ | Username
|
-The user name for logging in to the cloud service.
+ | The user name for logging in to the cloud service.
|
-Credential Type
+ | Credential Type
|
-A credential refers to the identity credential used for user system authentication. In this example, password is selected. - Password: Used for accessing cloud services using the console or development tools.
- Access key: Used for logging to the cloud service using development tools. This credential type is more secure, and is recommended if the user does not need to use the console.
+ A credential refers to the identity credential used for user system authentication. In this example, password is selected. - Password: Used for accessing cloud services using the console or development tools.
- Access key: Used for logging to the cloud service using development tools. This credential type is more secure, and is recommended if the user does not need to use the console.
|
|
-User Groups
+ | User Groups
|
-You can add a user to one or more user groups. Then the user will inherit the permissions granted to these user groups. The default user group admin has the administrator permissions and all of the permissions required to use all cloud resources.
+ | You can add a user to one or more user groups. Then the user will inherit the permissions granted to these user groups. The default user group admin has the administrator permissions and all of the permissions required to use all cloud resources.
|
-Description
+ | Description
|
-(Optional) Brief description about the user.
+ | (Optional) Brief description about the user.
|
diff --git a/docs/obs/umn/obs_03_0123.html b/docs/obs/umn/obs_03_0123.html
index 2daff9512..f8b507b5d 100644
--- a/docs/obs/umn/obs_03_0123.html
+++ b/docs/obs/umn/obs_03_0123.html
@@ -3,8 +3,8 @@
Configuring a Custom Bucket Policy (Common Mode)
If you want to grant special permissions to specific users, you can configure custom bucket policies. If a standard bucket policy conflicts with a custom bucket policy, the authorization priority is given to the custom bucket policy and then the standard bucket policy.
This topic describes how to configure a custom bucket policy in common mode (GUI).
- Procedure- In the bucket list, click the bucket you want to operate. The Overview page of the bucket is displayed.
- In the navigation pane, choose Permissions.
- On the Bucket Policies tab page, configure a custom bucket policy according to your needs.
On the right of Custom Bucket Policies, select Common mode to configure the policy in the GUI mode.
- - Click Create Bucket Policy. Select a proper policy mode as required. Valid values are as follows:
- Read-only: The authorized user will be granted with the read permission on the bucket and objects. For subsequent operations, see 5.
- Read and write: The authorized user will be granted with read and write permissions on the bucket and objects. For subsequent operations, see 5.
- Customized: The authorized user will be granted with customized permissions on the bucket and objects. For detailed configuration, see 6.
+Procedure- In the bucket list, click the bucket you want to operate. The Overview page is displayed.
- In the navigation pane, choose Permissions.
- On the Bucket Policies tab page, configure a custom bucket policy according to your needs.
On the right of Custom Bucket Policies, select Common mode to configure the policy in the GUI mode.
+ - Click Create Bucket Policy. Select a proper policy mode as required. Valid values are as follows:
- Read-only: The authorized user will have the read permission on the bucket and objects. For subsequent operations, see 5.
- Read and write: The authorized user will have the read and write permissions on the bucket and objects. For subsequent operations, see 5.
- Customized: The authorized user will have the customized permissions on the bucket and objects. For detailed configuration, see 6.
Only one bucket policy mode can be configured at a time.
- For the read-only and read and write modes, enter information about the authorized user in the following format and click OK.
Figure 1 Parameter settings of a custom bucket policy in the read-only or read and write mode
@@ -19,17 +19,17 @@
Principal
|
-- Include or Exclude
- Cloud service user, Federated user
- If you select Federated user, you can specify the user to be an Identity provider or a User group.
+- Include or Exclude
- Cloud service user, Federated user
- If you select Federated user, you can specify the user to be an Identity provider or a User group.
|
Specifies users on whom this bucket policy takes effect, including cloud service users and federated users. A cloud service user is the one who accesses the cloud services through registration with the cloud services. A federated user is the one who accesses the cloud services through federated identity authentication.
-- Include: The policy takes effect on specified users.
- Exclude: The policy takes effect on all users except the specified ones.
+- Include: The policy takes effect on specified users.
- Exclude: The policy takes effect on all users except the specified ones.
|
|
Resources
|
-- Include or Exclude
- Input format:
Object: object name
-Object set: object name prefix*, *object name suffix, or *
+
|
Indicates the resource that a bucket policy applies to. With the read-only mode and read and write mode, the policy can only apply to objects.
@@ -51,10 +51,10 @@
| Effect
|
-Allow or Deny
+ | Allow or Deny
|
Effect of a bucket policy.
-- Allow: The policy allows the matched requests.
- Deny: The policy denies the matched requests.
+- Allow: The policy allows the matched requests.
- Deny: The policy denies the matched requests.
|
Principal
@@ -68,28 +68,28 @@
|
Resources
|
-- Include or Exclude
- Resource input format:
Object: object name
-Object set: object name prefix*, *object name suffix, or *
+- Include or Exclude
- Resource input format:
Object: Object name
+Object set: Object name prefix*, *Object name suffix, or *
Blank: Indicates that the resource is the entire bucket.
|
Indicates the resource that a bucket policy applies to.
-- Include: The policy takes effect on the specified OBS resources.
- Exclude: The policy takes effect on all OBS resources except the specified ones.
+- Include: The policy takes effect on the specified OBS resources.
- Exclude: The policy takes effect on all OBS resources except the specified ones.
Relationship between resource types and actions:
- When a resource is an object or an object set, only the actions related to the object can be configured.
- When the resource is a bucket, only the actions related to the bucket can be configured.
|
|
Actions
|
-- Include or Exclude
- For details, see Actions.
+ | - Include or Exclude
- For details, see Actions.
|
Operations stated in the bucket policy.
-- Include: The policy takes effect on specified actions.
- Exclude: The policy takes effect on all actions except the specified ones.
+- Include: The policy takes effect on specified actions.
- Exclude: The policy takes effect on all actions except the specified ones.
|
Conditions
|
-- Conditional Operator: For details, see Table 1.
- Key: For details, see Table 2, Table 3, and Table 4.
- Value: The entered value is associated with the key.
+ |
|
Conditions for the policy statement to take effect.
|
diff --git a/docs/obs/umn/obs_03_0127.html b/docs/obs/umn/obs_03_0127.html
index 65374027d..2d2ee5fd8 100644
--- a/docs/obs/umn/obs_03_0127.html
+++ b/docs/obs/umn/obs_03_0127.html
@@ -12,7 +12,7 @@
- Configuring the Start Time and End Time of Access to Objects in a Bucket
-- Authorizing Access Permissions to Anonymous Users
+ - Granting Object Access Permissions to Anonymous Users
- Authorizing Folder Access Permissions to Anonymous Users
diff --git a/docs/obs/umn/obs_03_0130.html b/docs/obs/umn/obs_03_0130.html
index 14a965002..f1c27dd3f 100644
--- a/docs/obs/umn/obs_03_0130.html
+++ b/docs/obs/umn/obs_03_0130.html
@@ -2,8 +2,8 @@
Restricting Bucket Access to a Specified Address
You can configure a bucket policy to authorize a specified address the permission to access the bucket. This example shows how to deny a client access whose source IP address is within the range of 114.115.1.0/24.
- Procedure- In the bucket list, click the bucket you want to operate. The Overview page of the bucket is displayed.
- In the navigation pane, choose Permissions.
- Choose Bucket Policies > Custom Bucket Policies.
- Click Create Bucket Policy. The Create Bucket Policy dialog box is displayed.
- Configure the parameters according to the following table:
- Table 1 Parameters for authorizing the permission to access a specified bucketParameter
+Procedure- In the bucket list, click the bucket you want to operate. The Overview page is displayed.
- In the navigation pane, choose Permissions.
- Choose Bucket Policies > Custom Bucket Policies.
- Click Create Bucket Policy. The Create Bucket Policy dialog box is displayed.
- Configure the parameters according to the following table:
+ Table 1 Parameters for granting permission to access a bucketParameter
|
Value
|
@@ -36,7 +36,7 @@
|---|
Conditions
|
-- Conditional Operator: IpAddress
- Key: SourceIP
- Value: 114.115.1.0/24
+ | - Conditional Operator: IpAddress
- Key: SourceIP
- Value: 114.115.1.0/24
|
diff --git a/docs/obs/umn/obs_03_0131.html b/docs/obs/umn/obs_03_0131.html
index 90569b4ec..5da9ff9cf 100644
--- a/docs/obs/umn/obs_03_0131.html
+++ b/docs/obs/umn/obs_03_0131.html
@@ -2,8 +2,8 @@
Configuring the Start Time and End Time of Access to Objects in a Bucket
You can configure the bucket policy to limit the time when objects in a bucket are accessible. In the following example, the access time window is from 2019-03-26T12:00:00Z to 2019-03-26T15:00:00Z.
- Procedure- In the bucket list, click the bucket you want to operate. The Overview page of the bucket is displayed.
- In the navigation pane, choose Permissions.
- Choose Bucket Policies > Custom Bucket Policies.
- Click Create Bucket Policy. The Create Bucket Policy dialog box is displayed.
- Configure the parameters according to the following table:
- Table 1 Parameters for authorizing the permission to access a specified bucketParameter
+Procedure- In the bucket list, click the bucket you want to operate. The Overview page is displayed.
- In the navigation pane, choose Permissions.
- Choose Bucket Policies > Custom Bucket Policies.
- Click Create Bucket Policy. The Create Bucket Policy dialog box is displayed.
- Configure the parameters according to the following table:
+ Table 1 Parameters for granting permission to access a bucketParameter
|
Value
|
diff --git a/docs/obs/umn/obs_03_0132.html b/docs/obs/umn/obs_03_0132.html
index 7893210c8..2d31e9e0d 100644
--- a/docs/obs/umn/obs_03_0132.html
+++ b/docs/obs/umn/obs_03_0132.html
@@ -1,8 +1,8 @@
-Authorizing Access Permissions to Anonymous Users
+Granting Object Access Permissions to Anonymous Users
An enterprise stores a large volume of map data in OBS, and offers the data for public query. This enterprise sets a read permission for anonymous users, and provides the data URLs on the Internet. Then all users can read or download the data through the URLs.
- Procedure- Log in to OBS Console and click Create Bucket to create a bucket.
- In the bucket list, click the name of the newly created bucket. On the page that is displayed, click Objects in the pane on the left, and upload the map data as an object to the new bucket.
- Click the object to be operated and click Object ACL.
- In Object ACL > Public Permissions > Anonymous User, click Edit to set Access to Object to Read. For details, see Figure 1.
Figure 1 Setting an object read permission for anonymous users
+Procedure- Log in to OBS Console and click Create Bucket to create a bucket.
- In the bucket list, click the name of the newly created bucket. On the page that is displayed, click Objects in the pane on the left, and upload the map data as an object to the new bucket.
- Click the object to be operated and click Object ACL.
- Under Object ACL > Public Permissions > Anonymous User, click Edit to set Access to Object to Read, as shown in Figure 1.
Figure 1 Setting an object read permission for anonymous users
- Click Save to save the permission setting.
Verification- Click the object. Its URL is displayed under Link. Share the URL over the Internet, so that all users can access or download the object through the Internet.
- An anonymous user can view the object by copying the URL of the object to the web browser.
diff --git a/docs/obs/umn/obs_03_0134.html b/docs/obs/umn/obs_03_0134.html
index 48870523f..b31c2f4f3 100644
--- a/docs/obs/umn/obs_03_0134.html
+++ b/docs/obs/umn/obs_03_0134.html
@@ -38,7 +38,7 @@
|---|
Procedure- Log in to OBS Console.
- In the bucket list, click the bucket you want to operate. The Overview page of the bucket is displayed.
- In the navigation pane on the left, click Permissions to go to the permission management page.
- Click Bucket ACL. The Bucket ACL page is displayed.
- Click Add, enter the account ID of the user that will add the bucket to OBS Browser, and select the read and write access to the bucket.
If you want to authorize such access to all users, in the Public Permissions area, authorize the Anonymous User the read and write access to the bucket.
+ Procedure- Log in to OBS Console.
- In the bucket list, click the bucket you want to operate. The Overview page is displayed.
- In the navigation pane on the left, click Permissions to go to the permission management page.
- Click Bucket ACL. The Bucket ACL page is displayed.
- Click Add, enter the account ID of the user that will add the bucket to OBS Browser, and select the read and write access to the bucket.
If you want to authorize such access to all users, in the Public Permissions area, authorize the Anonymous User the read and write access to the bucket.
Account ID corresponds to Domain ID on the My Credential page.
- Click Save.
diff --git a/docs/obs/umn/obs_03_0135.html b/docs/obs/umn/obs_03_0135.html
index d12e54507..afb329c19 100644
--- a/docs/obs/umn/obs_03_0135.html
+++ b/docs/obs/umn/obs_03_0135.html
@@ -49,7 +49,7 @@
|
|---|
Procedure- Log in to OBS Console.
- In the bucket list, click the bucket you want to operate. The Overview page of the bucket is displayed.
- In the navigation pane on the left, click Permissions to go to the permission management page.
- Select the Public Read and Write policy from the standard bucket policies that are pre-defined.
- In the dialog box that is displayed, click Yes.
+ Procedure- Log in to OBS Console.
- In the bucket list, click the bucket you want to operate. The Overview page is displayed.
- In the navigation pane on the left, click Permissions to go to the permission management page.
- Select the Public Read and Write policy from the standard bucket policies that are pre-defined.
- In the dialog box that is displayed, click Yes.
Verification- Log in to OBS Browser.
- Click Add Bucket on the upper left corner of the page. The Add Bucket dialog box is displayed.
- Select Add external bucket and enter the bucket name.
- Click OK. The external bucket is added successfully.
- Click the newly added external bucket to open the bucket.
- Click Upload Object, and objects can be successfully uploaded to the bucket.
- Select an object in the bucket and click Delete. The object can be deleted successfully.
diff --git a/docs/obs/umn/obs_03_0136.html b/docs/obs/umn/obs_03_0136.html
index bfdddda1d..68d7d3092 100644
--- a/docs/obs/umn/obs_03_0136.html
+++ b/docs/obs/umn/obs_03_0136.html
@@ -3,7 +3,7 @@
Application Example 3: Authorizing Access Permissions Required for Adding an External Bucket Through the Custom Bucket Policy
A custom bucket policy can be used to grant the read and write access permissions to the bucket to be added.
If a custom bucket policy is used to authorize such permissions, the ListBucket, GetObject, and GetObjectVersion actions must be allowed. More actions can be allowed according to your actual needs.
- Procedure- Log in to OBS Console.
- In the bucket list, click the bucket you want to operate. The Overview page of the bucket is displayed.
- In the navigation pane on the left, click Permissions to go to the permission management page.
- In the Custom Bucket Policies area, click Create Bucket Policy. The Create Bucket Policy dialog box is displayed.
- Set the following parameters to authorize another account with the permission to access the bucket:
+ Procedure- Log in to OBS Console.
- In the bucket list, click the bucket you want to operate. The Overview page is displayed.
- In the navigation pane on the left, click Permissions to go to the permission management page.
- In the Custom Bucket Policies area, click Create Bucket Policy. The Create Bucket Policy dialog box is displayed.
- Set the following parameters to authorize another account with the permission to access the bucket:
Table 1 Parameters for authorizing the permission to access a specified bucketParameter
|
Value
diff --git a/docs/obs/umn/obs_03_0141.html b/docs/obs/umn/obs_03_0141.html
index 2c1758b22..75ff92fa2 100644
--- a/docs/obs/umn/obs_03_0141.html
+++ b/docs/obs/umn/obs_03_0141.html
@@ -2,7 +2,7 @@
Configuring a Custom Bucket Policy (Coding Mode)
You can configure a custom bucket policy by coding. The size of a custom bucket policy cannot exceed 20 KB.
- Procedure- In the bucket list, click the bucket you want to operate. The Overview page of the bucket is displayed.
- In the navigation pane on the left, click Permissions to go to the permission management page.
- On the Bucket Policies tab page, configure a custom bucket policy according to your needs.
On the right of Custom Bucket Policies, select Coding mode to configure the policy in the coding mode.
+Procedure- In the bucket list, click the bucket you want to operate. The Overview page is displayed.
- In the navigation pane, choose Permissions.
- On the Bucket Policies tab page, configure a custom bucket policy according to your needs.
On the right of Custom Bucket Policies, select Coding mode to configure the policy in the coding mode.
- The following is an example policy edited in JSON:
{
"Statement":[
{
@@ -29,46 +29,45 @@
}
]
}
-
-Table 1 Parameter descriptionParameter
+Table 1 Parameter descriptionParameter
|
-Description
+ | Description
|
|---|
-Action
+ | Action
|
-Actions on which the bucket policy takes effect. For details, see Actions.
+ | Actions the bucket policy applies to. For details, see Actions.
|
-Effect
+ | Effect
|
-For details about bucket policy effects, see Effect.
+ | Effect of the bucket policy. For details, see Effect.
|
-Principal
+ | Principal
|
-Authorized users on whom the bucket policy takes effect. You can obtain the user ID on the My Credential page by logging in to the console as the user to be authorized. Principal format:
+ | Authorized users on whom the bucket policy takes effect. You can obtain the user ID on the My Credential page by logging in to the console as the user to be authorized. Principal format:
- "domain/account ID" (when the principal is an account)
- "domain/account ID:user/User ID" (when the principal is a user under an account)
NOTE: For Account ID, enter the Domain ID that can be found on the My Credential page.
|
-Condition
+ | Condition
|
-Conditions under which the bucket policy takes effect. For details, see Conditions.
+ | Conditions under which the bucket policy takes effect. For details, see Conditions.
|
-Resource
+ | Resource
|
-Resources on which the bucket policy takes effect. For details, see Resources.
+ | Resources on which the bucket policy takes effect. For details, see Resources.
|
- Click Save.
+- Click Save.
diff --git a/docs/obs/umn/obs_03_0142.html b/docs/obs/umn/obs_03_0142.html
index ed2a71672..c8e319ea1 100644
--- a/docs/obs/umn/obs_03_0142.html
+++ b/docs/obs/umn/obs_03_0142.html
@@ -2,7 +2,7 @@
Configuring a Standard Bucket Policy
For standard bucket policy, OBS offers three options, namely the Private, Public Read, and Public Read and Write policies. These policies are pre-defined and can be applied with a few clicks.
- Procedure- In the bucket list, click the bucket you want to operate. The Overview page of the bucket is displayed.
- In the navigation pane, choose Permissions.
- On the Bucket Policies tab page, select a policy from the Standard Bucket Policies area.
- Private: No access beyond the bucket ACL settings is granted.
- Public Read: Anyone can read objects in the bucket.
- Public Read and Write: Anyone can read, write, or delete objects in the bucket.
+Procedure- In the bucket list, click the bucket you want to operate. The Overview page is displayed.
- In the navigation pane, choose Permissions.
- On the Bucket Policies tab page, select a policy from the Standard Bucket Policies area.
- Private: No access beyond the bucket ACL settings is granted.
- Public Read: Anyone can read objects in the bucket.
- Public Read and Write: Anyone can read, write, or delete objects in the bucket.
For your data security, the Public Read and Public Read and Write policies are not recommended.
Figure 1 Standard bucket policies
diff --git a/docs/obs/umn/obs_03_0150.html b/docs/obs/umn/obs_03_0150.html
index b6f13051e..688a315e2 100644
--- a/docs/obs/umn/obs_03_0150.html
+++ b/docs/obs/umn/obs_03_0150.html
@@ -3,7 +3,7 @@
Parallel File System
Parallel File System (PFS), a sub-product of OBS, is a high-performance file system, with access latency in milliseconds. PFS can support a bandwidth performance up to the TB/s level and supports millions of IOPS, which makes it ideal for processing high-performance computing (HPC) workloads.
- For details about PFS, see the Parallel File System Feature Guide.
+ For details about PFS, see the Parallel File System Feature Guide.
diff --git a/docs/obs/umn/obs_03_0203.html b/docs/obs/umn/obs_03_0203.html
index 7519db91d..24b64ead3 100644
--- a/docs/obs/umn/obs_03_0203.html
+++ b/docs/obs/umn/obs_03_0203.html
@@ -3,30 +3,30 @@
Using OBS
You can use the following tools to access and manage OBS resources:
- Table 1 OBS resource management toolsTool
+Table 1 OBS resource management tools |
|---|
|
|---|
|
|---|
|
|---|
|
|---|
|
|
|---|
|---|
|
|---|
|---|
|
|---|
|---|
|
|---|
|---|
|
|---|
|
|---|
|
|---|
|---|
|
