Help Center> Object Storage Service> Console Operation Guide> Permission Control> Configuring an Object Policy
View PDF

Configuring an Object Policy

An object policy applies to a specific object, which is also part of a bucket policy. The resource of an object policy is the selected object, and the actions and conditions are the object related actions and conditions configured in the bucket policy.

Procedure

  1. In the navigation pane on the left of OBS Console, choose Object Storage.
  2. In the bucket list, click a bucket name, and then the Overview page of the bucket is displayed.
  3. In the navigation pane on the left, click Objects.
  4. In the row containing the object for which you want to configure a policy, choose More > Configure Object Policy in the Operation column. The Configure Object Policy page is displayed.

    You can customize a policy or use a preset template to configure one as needed.

    • Using a preset template: The system presets object policy templates for four typical scenarios. You can use the templates to quickly configure object policies. For details about each template, see Policy Format.
    • Customizing a policy: You can also customize an object policy based on your service requirements. A custom object policy consists of five basic elements: effect, principal, resources, actions, and conditions, similar to a bucket policy. For details, see Policy Format. The resource is the selected object and is automatically configured by the system. For details about how to customize an object policy, see Creating a Custom Bucket Policy (Visual Editor). Different from customizing a bucket policy, to customize an object policy, you:
      1. Do not need to specify the resource.
      2. Can configure only object-related actions.

Parent topic: Permission Control