Origin Pull Authentication

Description

Object Storage Service (OBS) pull authentication works when you use an OBS bucket as the origin server. To authenticate access to the bucket, enable OBS Pull Authentication. In this way, CDN points of presence (PoPs) carry the authentication information during origin pull. If the information does not match the OBS bucket, origin pull fails.

Prerequisites

You have enabled OBS authorization.

Precautions

If your origin server is an OBS private bucket, enabling origin pull authentication allows all users to access resources in the bucket. Check whether resources in the bucket can be accessed publicly.
When you use a private OBS bucket as the origin server, you can use access control tools to filter user access.