Deleting a Bucket Policy

Function

This API is used to delete the policy from a bucket. For more information about bucket policies, see Configuring a Bucket Policy.

The 204 error code "No Content" is returned regardless of whether a requested bucket policy exists or not.

Authorization

This API cannot be used in cross-account scenarios. Assume there are two Huawei Cloud accounts, account A and account B. Account A cannot set, obtain, or delete the bucket policy of account B.

Within the same account, to call this API, you must be the bucket owner or have the permission to delete bucket policies. You are advised to use IAM or bucket policies for authorization. For details about OBS authorization methods, see Differences Between OBS Permissions Control Methods.

• If you use IAM for authorization, you need to use either role/policy-based authorization or identity policy-based authorization and configure the required permissions:
  • If you use role/policy-based authorization (IAM v3 APIs in the old IAM version), you must have the obs:bucket:DeleteBucketPolicy permission. For details, see Creating a Custom IAM Policy.
  • If you use identity policy-based authorization (IAM v5 APIs in the new IAM version), you must have the obs:bucket:deleteBucketPolicy permission, as shown in the following table. For details, see Creating a Custom IAM Identity Policy.

    Action	Access Level	Resource Type (*: Required)	Condition Key	Alias	Dependencies
    obs:bucket:deleteBucketPolicy	Permission_management	bucket *	g:EnterpriseProjectId g:ResourceTag/<tag-key>	-	-
    		-	obs:EpochTime obs:SourceIp obs:TlsVersion obs:CustomDomain

• If you use bucket policies for authorization, you must have the obs:bucket:DeleteBucketPolicy permission. For details, see Creating a Custom Bucket Policy.

URI

DELETE /

Calling Method

For details, see Calling APIs. Before calling this API, calculate the API signature and add it to the request.

You can debug this API in API Explorer.

Request Syntax

1
2
3
4

DELETE /?policy HTTP/1.1 
Host: bucketname.obs.region.myhuaweicloud.com 
Date: date
Authorization: authorization

URI Parameters

This request contains no URI parameters.

Request Headers

This request uses common headers. For details, see Table 3.

Request Body

This request contains no request body parameters.

Response Syntax

1
2
3
4

HTTP/1.1 status_code
Date: date
Content-Type: text/xml 
Content-Length: length

Response Headers

This response uses common headers. For details, see Table 1.

Response Body

This response does not contain a response body.

Error Responses

No special errors. You can find all errors in Table 2.

Sample Request

1
2
3
4

DELETE /?policy HTTP/1.1 
Host: examplebucket.obs.region.myhuaweicloud.com
Date: WED, 01 Jul 2015 02:36:06 GMT 
Authorization: OBS H4IPJX0TQTHTHEBQQCEC:jZiAT8Vx4azWEvPRMWi0X5BpJMA=

Sample Response

1
2
3
4
5

HTTP/1.1 204 No Content 
x-obs-request-id: 9006000001643AAAF70BF6152D71BE8A
x-obs-id-2: 32AAAQAAEAABSAAgAAEAABAAAQAAEAABCSB4oWmNX3gVGGLr1cRPWjOhffEbq1XV
Date: WED, 01 Jul 2015 02:36:06 GMT 
Server: OBS

Using SDKs to Call APIs

You are advised to use OBS SDKs to call APIs. SDKs encapsulate APIs to simplify development. You can call SDK API functions to access OBS without manually calculating signatures.

Helpful Links

• To use obsutil to delete bucket policies, see Deleting a Bucket Policy.
• For more information about bucket policies, see Configuring a Bucket Policy.
• For details about the billing items involved in API operations, see Billing Items.