Versions Compared

Old Version 14

changes.mady.by.user Sean Fleming

Saved on

compared with

New Version 15

changes.mady.by.user Sean Fleming

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

  1. Policies are attached to buckets and are a list of statements about actions allowed or denied for that bucket only.
  2. Policies override the default project permissions so care should be taken not to lock yourself out of the bucket.
  3. Any DENY in a policy statement counts as a negative permission overall for that action, even if there is also an ALLOW elsewhere.
  4. Policies only grant visibility of objects in a bucket, not visibility of the bucket itself.
Note

You can use the pshell command "info mybucket" to examine the active policies on that bucket.


Expand
titleExamples...

Example1 - give a list of Pawsey usernames (user1, user2, user3, and user4) readonly access to a project bucket called p0002-sfx.

Note: if a user (eg user1) attempts to list buckets they will see nothing. However, if they attempt to list objects inside the bucket it will show the objects inside p0002-sfx/ - see Note 4.

Code Block
pawsey0002:/>policy p0002-sfx +r user1,user2,user3,user4
Setting bucket=p0002-sfx, perm=+r, for user(s)='user1,user2,user3,user4'


Example 2 - revoke user3 from having read access to the bucket.

Code Block
pawsey0002:/>policy p0002-sfx -r user3
Setting bucket=p0002-sfx, perm=-r, for user(s)='user3'


Example 3 -  grant read and write permission on a bucket.

Code Block
pawsey0002:/>policy p0002-sfx +rw user1
Setting bucket=p0002-sfx, perm=+rw, for user(s)='user1'


Example 4 - make the objects in p0002-sfx readonly and publicly accessible.

Code Block
pawsey0002:/>policy p0002-sfx +r *
Setting bucket=p0002-sfx, perm=+r, for user(s)=None


Example 5 - remove all policies on a bucket.

Code Block
pawsey0002:/>policy p0002-sfx -
Deleting all policies on bucket=p0002-sfx


...

Simple S3 bucket lifecycles can also be automatically created for you affecting multi-part uploads and versioning.

Note

Remember to use Use the pshell command "info mybucket" to check if there are any current lifecycle rules as you may overwrite them with the following examples.

...