Overview

This document summarizes practices in common application scenarios of Object Storage Service (OBS). Each practice case is given detailed solution description and operation guidance, helping you easily build your storage services based on OBS.

**Table 1** OBS best practices
Best Practice	Description
Suggestions on OBS Security Configuration	Provides actionable guidance for enhancing the overall security of using OBS.
Enterprise Data Access Control	Describes how to configure access to enterprise data. After subscribing to OBS, enterprises can configure the following four types of access control to control access to their data: Grant only required permissions to employees in different departments to isolate access to the enterprise data. Grant permissions to users of a department or project to download the shared data but not to write or delete the shared data. Allocate IAM users with different roles to each department and use bucket policies to authorize the IAM users independent permissions on resources. Add external buckets on OBS Browser+ to isolate bucket resources between departments.
Migrating Local Data to OBS	Describes how to migrate local data from personal computers or on-premises storage servers to OBS.
Migrating Data from a Third-Party Vendor to OBS	Describes several migration methods for migrating data from third-party vendors to OBS.
Migrating Data Between OBS Buckets	Describes how to migrate data between Huawei Cloud OBS buckets that are under different accounts or deployed in the same or different regions.
Using Backup Software to Back Up Local Data to OBS	Describes why you should back up local data to OBS and what backup software you can use, and uses Commvault as an example to describe how to back up local data to OBS.
Accessing OBS from an ECS over the Intranet	Describes how to access OBS from your Elastic Cloud Server (ECS) over the internet or the Huawei Cloud intranet (recommended for better performance and lower costs).
Using a User-Defined Domain Name to Host a Static Website	Describes how to use a user-defined domain name to host static websites on OBS, for you to quickly launch personal and enterprise static websites without setting up website servers.
Verifying Data Consistency	Describes how to verify data consistency during data upload and download using the MD5 check, because data may become inconsistent due to network hijacking, caching, and other reasons during upload and download.
Optimizing the Performance	Describes how to add random prefixes to object names to implement horizontal expansion for high-speed requests, and thus improve the access rate and shorten the access latency.
Using the PostObject API to Upload Data from a Web Client to OBS	Describes how to use the PostObject API to directly upload files from a web client to OBS, that is, to upload files to OBS through a browser. With this method, you can directly upload data to OBS, without having to upload data to the app server first. This makes the transmission faster and does not impose pressure on the server. Additionally, it is more secure to adopt direct transmission with a signature returned by the server.
Uploading Data from Mobile Apps to OBS	Describes two methods for app clients to access OBS, to better protect data and prevent data leakage and unauthorized access.
Uploading Data from Mini Programs to OBS	Demonstrates how to upload files to OBS using a mini program.
Accessing OBS Through an NGINX Reverse Proxy	Describes how to configure the NGINX reverse proxy on an ECS, so that you can use a fixed IP address to access OBS.