OBS Request Conditions

Request conditions are useful in determining when a custom policy is in effect. A request condition consists of a condition key and an operator. Condition keys are either global or service-level and are used in the condition elements of a policy statement. Global condition keys (starting with g:) are available for operations of all services, while service-level condition keys (starting with a service name acronym like obs:) are available only for operations of a specific service. An operator is used together with a condition key to form a complete condition statement.

OBS provides a group of predefined condition keys through IAM. For example, you can use the obs:SourceIp condition key to allow access only from a specific IP address.

The condition keys and operators supported by OBS are the same as those in bucket policies. When configuring condition keys in IAM, start them with obs:. For details, see Policy Format.