Restrict access to a specific IP address

Last updated:2021-08-20 12:02:02

The following policy allows any users to perform any KS3 operations on objects in the specified bucket. However, all requests must originate from the specified IP address range.

{
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "ks3:*"
      ],
      "Principal": {
        "KSC": [
          "*"
        ]
      },
      "Resource": [
        "krn:ksc:ks3:::example_bucket",
        "krn:ksc:ks3:::example_bucket/*"
      ],
      "Condition": {
        "IpAddress": {
          "ksc:SourceIp": [
            "54.240.144.0/24"
          ]
        },
        "NotIpAddress": {
          "ksc:SourceIp": [
            "54.240.144.188/32"
          ]
        }
      }
    }
  ]
}
 

Did you find the above information helpful?

Unhelpful
Mostly Unhelpful
A little helpful
Helpful
Very helpful

What might be the problems?

Insufficient
Outdated
Unclear or awkward
Redundant or clumsy
Lack of context for the complex system or functionality

More suggestions

0/200

Please give us your feedback.

Submitted

Thank you for your feedback.

问题反馈