使用RAM子賬号給OSS授權

讀寫授權

1. OOS相關

1. 建立對應{bucket},{object}
   • 選擇地域

2. RAM相關

1. 建立對應子賬戶
   • 啟用程式設計通路
2. 建立自定義授權
   • 命名 CustomOssAuthorization{bucket}{obiect}rw
3. 授權語句

   {
       "Statement": [
           {
               "Effect": "Allow",
               "Action": "oss:ListBuckets",
               "Resource": "acs:oss:*:*:*"
           },
           {
               "Action": "oss:*",
               "Effect": "Allow",
               "Resource": [
                   "acs:oss:*:*:{bucket}",
                   "acs:oss:*:*:{bucket}/{obiect}/*"
                   // {object如果沒有就可以不寫}
               ]
           }
       ],
       "Version": "1"
   }           

   {
       "Statement": [
           {
               "Effect": "Allow",
               "Action": "oss:ListBuckets",
               "Resource": "acs:oss:*:*:*"
           },
           {
               "Action": "oss:*",
               "Effect": "Allow",
               "Action": [
                   "ListObjects"
               ]
               "Resource": [
                   "acs:oss:*:*:{bucket}",
                   "acs:oss:*:*:{bucket}/{obiect}/*"
               ]
           }
       ],
       "Version": "1"
   }           

4. 隻讀通路單台ECS

   {
       "Version": "1",
       "Statement": [
           {
               "Action": "ecs:Describe*",
               "Resource": "*",
               "Effect": "Allow"
           },
           {
               "Action": "ecs:List*",
               "Resource": [
                   "acs:ecs:cn-shanghai:*:instance/i-uf67snh699skxo202uj4"
               ],
               "Effect": "Allow"
           },
           {
               "Action": [
                   "vpc:DescribeVpcs",
                   "vpc:DescribeVSwitches"
               ],
               "Resource": "*",
               "Effect": "Allow"
           }
       ]
   }