...
| Note |
|---|
You can use the pshell command "info mybucket" to examine the active policies on that bucket. |
| Expand |
|---|
|
| Panel |
|---|
| title | Example1 - give a list of Pawsey |
|---|
|
usernames ( |
| Code Block |
|---|
project123:/>policy my-bucket +r user1,user2,user3, |
|
and user4) readonly access to a project bucket called p0002-sfx.user4
Setting bucket=my-bucket, perm=+r, for user(s)='user1,user2,user3,user4' |
Note: if a user (eg user1) attempts to list buckets they will see nothing. However, if they attempt to list objects inside the bucket it will show the objects inside |
p0002sfx
| Code Block |
|---|
pawsey0002:/>policy p0002-sfx +r user1,user2,user3,user4
Setting bucket=p0002-sfx, perm=+r, for user(s)='user1,user2,user3,user4' | Panel |
|---|
| title | Example 2 - revoke user3 from having read access to the bucket. |
|---|
|
pawsey0002p0002sfxbucket -r user3
Setting bucket= |
p0002sfxbucket, perm=-r, for user(s)='user3' |
|
| Panel |
|---|
| title | Example 3 - grant read and write permission on a bucket. |
|---|
|
pawsey0002p0002sfxbucket +rw user1
Setting bucket=p0002-sfx, perm=+rw, for user(s)='user1' |
|
the objects in p0002-sfx | a bucket readonly and publicly accessible. |
|
pawsey0002p0002sfxbucket +r *
Setting bucket= |
p0002sfxbucket, perm=+r, for user(s)=None |
|
| Panel |
|---|
| title | Example 5 - remove all policies on a bucket. |
|---|
|
pawsey0002p0002sfxbucket -
Deleting all policies on bucket= |
p0002sfx
|
|
Lifecycles
Simple S3 bucket lifecycles can also be automatically created for you affecting multi-part uploads and versioning.
...