Updated on 2024-04-15 GMT+08:00

Obtaining Bucket Policy Information

Functions

This operation uses the sub-resources of policy to return the policy information of a specified bucket.

To perform this operation, the user must be the bucket owner or the bucket owner's IAM user that has permissions required for obtaining bucket policies.

This operation cannot be performed in the following scenarios, and the 404 error code "NoSuchBucketPolicy" is returned:

  • The specified bucket policy does not exist.
  • The standard bucket policy is set to Private and no custom bucket policy is configured.

Request Syntax

1
2
3
4
GET /?policy HTTP/1.1 
Host: bucketname.obs.region.example.com
Date: date
Authorization: authorization

Request Parameters

This request contains no message parameters.

Request Headers

This request uses common headers. For details, see Table 3.

Request Elements

This request involves no elements.

Response Syntax

1
2
3
4
HTTP/1.1 status_code
Content-Type: application/xml 
Date: date
Policy Content

Response Headers

The response to the request uses common headers. For details, see Table 1.

Response Elements

The response body is a JSON string that contains the bucket policy information.

Error Responses

No special error responses are returned. For details, see Table 2.

Sample Request

1
2
3
4
GET /?policy HTTP/1.1 
Host: examplebucket.obs.region.example.com
Date: WED, 01 Jul 2015 02:35:46 GMT 
Authorization: OBS H4IPJX0TQTHTHEBQQCEC:jZiAT8Vx4azWEvPRMWi0X5BpJMA=

Sample Response

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
HTTP/1.1 200 OK 
x-obs-request-id: A603000001604A7DFE4A4AF31E301891
x-obs-id-2: BKOvGmTlt6sda5X4G89PuMO4fabObGYmnpRGkaMba1LqPt0fCACEuCMllAObRK1n
Date: WED, 01 Jul 2015 02:35:46 GMT 
Content-Length: 509
Server: OBS

{
    "Statement":[
        {
            "Sid":"Stmt1375240018061",
            "Effect":"Allow",
            "Principal":{
                "ID":[
                    "domain/domainiddomainiddomainiddo006666:user/useriduseriduseriduseridus004001",
                    "domain/domainiddomainiddomainiddo006667:user/*"
                ]
            },
            "Action":[
                "*"
            ],
            "Resource":[
                "examplebucket"
            ]
        }
    ]
}