Ceph 配置URL通路s3 Bucket

一、建立json檔案，用于編輯policy，檔案内容如下（Version并不重要），Action存在多種選擇(如步驟三所示)，并且允許同時選擇多個，本文隻是通過URL通路Bucket中的檔案，是以隻選擇了s3:GetObject。

{

     "Version": "2012-10-17",

     "Statement": [

         {

             "Effect": "Allow",

             "Principal":"*",

             "Action":"s3:GetObject",

             "Resource": "*"

         }

     ]

 }

二、配置Policy生效，指令如下（File為上一步生成的檔案）。

s3cmd setpolicy <File> s3://<Bucket>/ --acl-public  //這一條指令使得<Bucket>中的所有内容權限為Public(隻讀），包括續傳的檔案。其中，<File>為上一步建立的json檔案。

s3cmd setacl --acl-public s3://<Bucket>/           //這一條指令使得<Bucket>的檔案目錄權限為Public（隻讀），即可通過URL看到<Bucket>中的檔案目錄。

三、S3 Action

• s3:AbortMultipartUpload
• s3:CreateBucket
• s3:DeleteBucketPolicy
• s3:DeleteBucket
• s3:DeleteBucketWebsite
• s3:DeleteObject
• s3:DeleteObjectVersion
• s3:DeleteReplicationConfiguration
• s3:GetAccelerateConfiguration
• s3:GetBucketAcl
• s3:GetBucketCORS
• s3:GetBucketLocation
• s3:GetBucketLogging
• s3:GetBucketNotification
• s3:GetBucketPolicy
• s3:GetBucketRequestPayment
• s3:GetBucketTagging
• s3:GetBucketVersioning
• s3:GetBucketWebsite
• s3:GetLifecycleConfiguration
• s3:GetObjectAcl
• s3:GetObject
• s3:GetObjectTorrent
• s3:GetObjectVersionAcl
• s3:GetObjectVersion
• s3:GetObjectVersionTorrent
• s3:GetReplicationConfiguration
• s3:ListAllMyBuckets
• s3:ListBucketMultiPartUploads
• s3:ListBucket
• s3:ListBucketVersions
• s3:ListMultipartUploadParts
• s3:PutAccelerateConfiguration
• s3:PutBucketAcl
• s3:PutBucketCORS
• s3:PutBucketLogging
• s3:PutBucketNotification
• s3:PutBucketPolicy
• s3:PutBucketRequestPayment
• s3:PutBucketTagging
• s3:PutBucketVersioning
• s3:PutBucketWebsite
• s3:PutLifecycleConfiguration
• s3:PutObjectAcl
• s3:PutObject
• s3:PutObjectVersionAcl
• s3:PutReplicationConfiguration
• s3:RestoreObject