Standard Storage Service (KS3)

      Documentation Standard Storage Service (KS3) Access Control Management Examples of bucket policies Restrict access to a specific IP address

      Restrict access to a specific IP address

      Last updated：2021-08-20 12:02:02

      The following policy allows any users to perform any KS3 operations on objects in the specified bucket. However, all requests must originate from the specified IP address range.

      {
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "ks3:*"
      ],
      "Principal": {
        "KSC": [
          "*"
        ]
      },
      "Resource": [
        "krn:ksc:ks3:::example_bucket",
        "krn:ksc:ks3:::example_bucket/*"
      ],
      "Condition": {
        "IpAddress": {
          "ksc:SourceIp": [
            "54.240.144.0/24"
          ]
        },
        "NotIpAddress": {
          "ksc:SourceIp": [
            "54.240.144.188/32"
          ]
        }
      }
    }
  ]
}
      Previous:Restrict access requests that have a specific request header
      Next:Grant permissions to IAM users

      Did you find the above information helpful?

      Unhelpful
      Mostly Unhelpful
      A little helpful
      Helpful
      Very helpful

      What might be the problems?

      Insufficient
      Outdated
      Unclear or awkward
      Redundant or clumsy
      Lack of context for the complex system or functionality

      More suggestions

      0/200

      Please give us your feedback.

      Submitted

      Thank you for your feedback.

      问题反馈