OSS 權限策略文件示例

示例1：
允許ip爲 ip1,ip2的服務器對bucket1,bucket2進行讀寫

{
“Statement”: [
{
“Action”: “oss:*”,
“Effect”: “Allow”,
“Resource”: [
“acs:oss:::bucket1”,
“acs:oss:::bucket1/*”,
“acs:oss:::bucket2”,
“acs:oss:::bucket2/*”
],
“Condition”: {
“IpAddress”: {
“acs:SourceIp”: [
“ip1”,
“ip2”
]
}
}
}
],
“Version”: “1”
}

示例2：
允許ip爲 ip1 的服務器對bucket1,bucket2進行讀寫

{
“Statement”: [
{
“Action”: “oss:*”,
“Effect”: “Allow”,
“Resource”: [
“acs:oss:::bucket1”,
“acs:oss:::bucket1/*”,
“acs:oss:::bucket2”,
“acs:oss:::bucket2/*”
],
“Condition”: {
“IpAddress”: {
“acs:SourceIp”: ｛
“ip1”｝
]
}
}
}
],
“Version”: “1”
}

示例3， 不加IP限制的
{
“Statement”: [
{
“Action”: “oss:*”,
“Effect”: “Allow”,
“Resource”: [
“acs:oss:::bucket1”,
“acs:oss:::bucket1/*”
]
}
],
“Version”: “1”
}

注意事項：
如果只有一個條件例用｛｝，如果多個條件則使用 []

編寫一個合理的 OSS 策略文件能夠有效的防止oss 拖庫事件的發生