From 719244eae3219e0a35337c1749ea59ad6ac13f33 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?=E2=80=9CMrGourd=E2=80=9D?= <“lijiawei5@huawei.com”> Date: Wed, 30 Sep 2020 15:54:43 +0800 Subject: [PATCH] update OBS UMN according to helpcenter 2.0.17 --- doc/source/obs/index.rst | 12 - .../obs/user-guide/access-keys-(ak-sk).md | 2 +- ...ccessing-an-object-using-its-object-url.md | 8 +- .../accessing-an-object-using-its-url.md | 14 +- .../adding-a-bucket-(getting-started).md | 4 +- doc/source/obs/user-guide/adding-a-bucket.md | 18 +- .../obs/user-guide/adding-external-buckets.md | 6 +- ...d-for-adding-an-external-bucket-through.md | 8 +- ...d-for-adding-an-external-bucket-through.md | 8 +- ...figuring-smn-enabled-event-notification.md | 13 +- .../user-guide/bucket-acls-and-object-acls.md | 2 +- .../bucket-policies-and-object-policies.md | 6 +- .../configuring-a-bucket-acl-(console).md | 4 +- ...ng-a-custom-bucket-policy-(common-mode).md | 16 +- .../configuring-a-lifecycle-rule-(browser).md | 23 +- .../configuring-a-lifecycle-rule-(console).md | 27 +- .../configuring-a-standard-bucket-policy.md | 6 +- ...configuring-access-logging-for-a-bucket.md | 5 +- .../user-guide/configuring-an-object-acl.md | 4 +- .../configuring-an-object-policy.md | 6 +- .../user-guide/configuring-cors-(browser).md | 10 +- doc/source/obs/user-guide/configuring-cors.md | 8 +- .../obs/user-guide/configuring-logging.md | 4 +- .../obs/user-guide/configuring-redirection.md | 12 +- .../configuring-static-website-hosting.md | 24 +- .../user-guide/configuring-url-validation.md | 12 +- .../configuring-user-permissions-(browser).md | 20 +- .../configuring-user-permissions-(console).md | 20 +- .../obs/user-guide/configuring-versioning.md | 8 +- doc/source/obs/user-guide/cors-(browser).md | 7 + doc/source/obs/user-guide/cors-(console).md | 7 + doc/source/obs/user-guide/cors.rst | 11 - .../creating-a-bucket-(getting-started).md | 62 +++- .../obs/user-guide/creating-a-bucket.md | 61 ++-- ...ing-a-user-and-granting-obs-permissions.md | 18 +- .../creating-access-keys-(ak-and-sk).md | 16 +- .../user-guide/deleting-a-bucket-(browser).md | 4 +- ...ting-a-bucket-(browser-getting-started).md | 4 +- .../user-guide/deleting-a-bucket-(console).md | 10 +- ...ting-a-bucket-(console-getting-started).md | 10 +- .../downloading-a-file-(getting-started).md | 8 +- ...ding-a-file-or-folder-(getting-started).md | 4 +- .../downloading-a-file-or-folder.md | 4 +- .../obs/user-guide/downloading-a-file.md | 8 +- .../obs/user-guide/event_notification.rst | 12 - doc/source/obs/user-guide/faqs.rst | 153 ---------- .../figures/authorization-process.png | Bin 12746 -> 14088 bytes doc/source/obs/user-guide/getting_started.rst | 16 - ...tion-permissions-for-a-specified-bucket.md | 2 +- ...tion-permissions-for-a-specified-bucket.md | 8 +- ...an-i-control-access-permissions-for-obs.md | 6 +- ...o-i-obtain-the-access-path-to-an-object.md | 4 +- doc/source/obs/user-guide/iam-policies.md | 8 +- doc/source/obs/user-guide/index.md | 287 ++++++++++++++++++ doc/source/obs/user-guide/index.rst | 14 - .../obs/user-guide/lifecycle_management.rst | 11 - .../user-guide/logging-overview-(browser).md | 5 +- .../user-guide/logging-overview-(console).md | 5 +- doc/source/obs/user-guide/logging.rst | 11 - .../managing-fragments-(console).md | 8 +- .../obs/user-guide/managing-fragments.md | 4 +- .../obs/user-guide/managing_buckets.rst | 13 - .../obs/user-guide/managing_objects.rst | 17 -- .../user-guide/object-metadata-overview.md | 8 +- doc/source/obs/user-guide/object_metadata.rst | 10 - .../obs_browser_operation_guide.rst | 208 ------------- .../obs_console_operation_guide.rst | 30 -- .../permission-control-overview-(browser).md | 6 +- .../permission-control-overview-(console).md | 2 +- .../obs/user-guide/permission_control.rst | 116 ------- .../obs/user-guide/permissions-management.md | 26 +- doc/source/obs/user-guide/principal.md | 10 +- doc/source/obs/user-guide/resources.md | 8 +- .../restoring-a-cold-file-stored-in-obs.md | 7 +- .../obs/user-guide/searching-for-a-bucket.md | 6 +- ...earching-for-a-file-or-folder-(browser).md | 2 +- ...earching-for-a-file-or-folder-(console).md | 2 +- .../obs/user-guide/server_side_encryption.rst | 11 - .../obs/user-guide/service_overview.rst | 30 -- .../smn-enabled-event-notification.md | 44 +++ .../obs/user-guide/static_website_hosting.rst | 14 - .../storage-classes-overview-(browser).md | 32 +- .../storage-classes-overview-(console).md | 32 +- doc/source/obs/user-guide/tag-overview.md | 5 +- doc/source/obs/user-guide/tags.rst | 11 - .../user-guide/task-management-(console).md | 8 +- doc/source/obs/user-guide/task-management.md | 10 +- ...n-objects-are-managed-using-obs-browser.md | 18 +- doc/source/obs/user-guide/troubleshooting.rst | 14 - .../uploading-a-file-(getting-started).md | 14 +- .../uploading-a-file-or-folder-(browser).md | 4 +- .../user-guide/uploading-a-file-or-folder.md | 12 +- ...e-with-server-side-encryption-(console).md | 2 +- ...ding-a-file-with-server-side-encryption.md | 12 +- doc/source/obs/user-guide/uploading-a-file.md | 16 +- doc/source/obs/user-guide/url_validation.rst | 11 - ...ame-to-configure-static-website-hosting.md | 40 +-- doc/source/obs/user-guide/using-obs.md | 2 +- doc/source/obs/user-guide/versioning.rst | 11 - ...basic-information-of-a-bucket-(browser).md | 4 +- ...basic-information-of-a-bucket-(console).md | 14 +- 101 files changed, 789 insertions(+), 1151 deletions(-) delete mode 100644 doc/source/obs/index.rst create mode 100644 doc/source/obs/user-guide/cors-(browser).md create mode 100644 doc/source/obs/user-guide/cors-(console).md delete mode 100644 doc/source/obs/user-guide/cors.rst delete mode 100644 doc/source/obs/user-guide/event_notification.rst delete mode 100644 doc/source/obs/user-guide/faqs.rst delete mode 100644 doc/source/obs/user-guide/getting_started.rst create mode 100644 doc/source/obs/user-guide/index.md delete mode 100644 doc/source/obs/user-guide/index.rst delete mode 100644 doc/source/obs/user-guide/lifecycle_management.rst delete mode 100644 doc/source/obs/user-guide/logging.rst delete mode 100644 doc/source/obs/user-guide/managing_buckets.rst delete mode 100644 doc/source/obs/user-guide/managing_objects.rst delete mode 100644 doc/source/obs/user-guide/object_metadata.rst delete mode 100644 doc/source/obs/user-guide/obs_browser_operation_guide.rst delete mode 100644 doc/source/obs/user-guide/obs_console_operation_guide.rst delete mode 100644 doc/source/obs/user-guide/permission_control.rst delete mode 100644 doc/source/obs/user-guide/server_side_encryption.rst delete mode 100644 doc/source/obs/user-guide/service_overview.rst delete mode 100644 doc/source/obs/user-guide/static_website_hosting.rst delete mode 100644 doc/source/obs/user-guide/tags.rst delete mode 100644 doc/source/obs/user-guide/troubleshooting.rst delete mode 100644 doc/source/obs/user-guide/url_validation.rst delete mode 100644 doc/source/obs/user-guide/versioning.rst diff --git a/doc/source/obs/index.rst b/doc/source/obs/index.rst deleted file mode 100644 index 8ec4f3d5..00000000 --- a/doc/source/obs/index.rst +++ /dev/null @@ -1,12 +0,0 @@ -====================== -Object Storage Service -====================== - - -.. toctree:: - :maxdepth: 2 - - - api-reference-(s3)/index - api-reference-(swift)/index - user-guide/index \ No newline at end of file diff --git a/doc/source/obs/user-guide/access-keys-(ak-sk).md b/doc/source/obs/user-guide/access-keys-(ak-sk).md index 0024ba68..bae28bcc 100644 --- a/doc/source/obs/user-guide/access-keys-(ak-sk).md +++ b/doc/source/obs/user-guide/access-keys-(ak-sk).md @@ -13,7 +13,7 @@ You can create a pair of permanent AK and SK on the **My Credentials** page. **Temporary AK/SK Pair** -Temporary AK/SK and security token are temporary access tokens issued by the system to users. The validity period is between 15 minutes and 24 hours. Temporary AK/SK and security token comply with the least privilege principle and can be used to access OBS temporarily. Error code 403 is returned if an access request does not have the security token. +A temporary AK/SK pair and the security token are temporary access tokens granted by the system to users. The validity period of the tokens ranges from 15 minutes to 24 hours. After the tokens expire, you need to obtain the tokens again. A temporary AK/SK pair and the security token comply with the least privilege principle and can only be used to temporarily access OBS. A 403 error will be returned if the security token is not available. - Temporary AK: indicates the ID of a temporary access key. It is the unique ID associated with the SK. The AK and SK are used together to obtain an encrypted signature for a request. - Temporary SK: indicates the temporary private key used together with its associated temporary AK. The AK and SK are used together to identify a request sender to prevent the request from being modified. diff --git a/doc/source/obs/user-guide/accessing-an-object-using-its-object-url.md b/doc/source/obs/user-guide/accessing-an-object-using-its-object-url.md index 8b14d58e..3d06f741 100644 --- a/doc/source/obs/user-guide/accessing-an-object-using-its-object-url.md +++ b/doc/source/obs/user-guide/accessing-an-object-using-its-object-url.md @@ -4,7 +4,7 @@ The object uniform resource locator \(URL\) \(object sharing\) function allows a ## Prerequisites -An anonymous user has been assigned with the permission to read the specified object. For details, see [Authorizing Access Permissions to Anonymous Users](authorizing-access-permissions-to-anonymous-users.md). +An anonymous user has been assigned with the permission to read the specified object. For details, see [Configuring an Object ACL](configuring-an-object-acl.md). ## Procedure @@ -18,9 +18,9 @@ An anonymous user has been assigned with the permission to read the specified ob - If you select **Other object storage services** when logging in to OBS Browser, the object URL is in the format of https://_storage server IP address_ or _domain name_/_bucket name_/_directory level_/_object name_. If the object is in the root directory of the bucket, the URL does not contain a _directory level_. - If you select **OBS** when logging in to OBS Browser, the object URL is in the format of https://_bucket name.domain name_/_directory level_/_object name._ If the object is in the root directory of the bucket, the URL does not contain a _directory level_. - > **NOTE:** - >To allow anonymous users to access objects stored in a bucket of Cold storage class using the URL, ensure that the objects are in the **Restored** state. - >The method of using a browser to access objects varies depending on the object type. You can directly open **.txt** and **.html** files using a browser. However, when you open **.exe** and **.dat** files using a browser, the files are automatically downloaded to your local computer. + > **NOTE:** + >To allow anonymous users to access objects stored in a bucket of Cold storage class using the URL, ensure that the objects are in the **Restored** state. + >The method of using a browser to access objects varies depending on the object type. You can directly open **.txt** and **.html** files using a browser. However, when you open **.exe** and **.dat** files using a browser, the files are automatically downloaded to your local computer. 4. Click **Copy** to copy the URL of the object. 5. In the displayed dialog box, click **Close** to close the dialog box. diff --git a/doc/source/obs/user-guide/accessing-an-object-using-its-url.md b/doc/source/obs/user-guide/accessing-an-object-using-its-url.md index 0691aee9..a7c07890 100644 --- a/doc/source/obs/user-guide/accessing-an-object-using-its-url.md +++ b/doc/source/obs/user-guide/accessing-an-object-using-its-url.md @@ -4,14 +4,14 @@ If you set the permission for an object to allow anonymous users to read it, ano ## Prerequisites -A read permission has been set for anonymous users. For details about how to set the permission, see [Authorizing Access Permissions to Anonymous Users](authorizing-access-permissions-to-anonymous-users.md). +A read permission has been set for anonymous users. For details about how to enable the permission, see [Authorizing Access Permissions to Anonymous Users](authorizing-access-permissions-to-anonymous-users.md). -> **NOTE:** ->Encrypted objects cannot be shared. +> **NOTE:** +>Encrypted objects cannot be shared. ## Procedure -1. In the bucket list, click the bucket to be operated. The **Summary** page of the bucket is displayed. +1. In the bucket list, click the bucket to be operated. The **Overview** page of the bucket is displayed. 2. In the navigation pane on the left, click **Objects**. 3. Click the object to be shared. The object information is displayed on the top part of the page. The **Link** displays the shared link of the object. For details, see [Figure 1](#fig36534596192426). @@ -20,8 +20,8 @@ A read permission has been set for anonymous users. For details about how to set **Figure 1** Object link  - > **NOTE:** - >- To allow anonymous users to access objects whose storage classes are **Cold** using the URL, ensure that the objects are in the **Restored** state. - >- The method of using a browser to access objects varies depending on the object type. You can directly open **.txt** and **.html** files using a browser. However, when you open **.exe** and **.dat** files using a browser, the files are automatically downloaded to your local computer. + > **NOTE:** + >- To allow anonymous users to access objects whose storage classes are **Cold** using the URL, ensure that the objects are in the **Restored** state. + >- The method of using a browser to access objects varies depending on the object type. You can directly open **.txt** and **.html** files using a browser. However, when you open **.exe** and **.dat** files using a browser, the files are automatically downloaded to your local computer. diff --git a/doc/source/obs/user-guide/adding-a-bucket-(getting-started).md b/doc/source/obs/user-guide/adding-a-bucket-(getting-started).md index b6621cc9..480ed523 100644 --- a/doc/source/obs/user-guide/adding-a-bucket-(getting-started).md +++ b/doc/source/obs/user-guide/adding-a-bucket-(getting-started).md @@ -2,8 +2,8 @@ A bucket is a container that stores objects in OBS. Before you store data in OBS, you need to create a bucket first. -> **NOTE:** ->On OBS Console, an account can have 100 buckets. +> **NOTE:** +>On OBS Console, an account can have 100 buckets. There is no such upper limit if you use the API or other methods to create buckets. However, these buckets also take up the bucket quota on OBS Console. ## Procedure diff --git a/doc/source/obs/user-guide/adding-a-bucket.md b/doc/source/obs/user-guide/adding-a-bucket.md index b88d5cd6..cf8cf545 100644 --- a/doc/source/obs/user-guide/adding-a-bucket.md +++ b/doc/source/obs/user-guide/adding-a-bucket.md @@ -2,8 +2,8 @@ Buckets are containers that store objects in OBS. Before you store data in OBS, you need to create buckets. -> **NOTE:** ->On OBS Console, an account can have 100 buckets. +> **NOTE:** +>On OBS Console, an account can have 100 buckets. There is no such upper limit if you use the API or other methods to create buckets. However, these buckets also take up the bucket quota on OBS Console. ## Procedure @@ -49,10 +49,10 @@ Buckets are containers that store objects in OBS. Before you store data in OBS, - > **NOTE:** - >- When a URL is used to access a bucket, the bucket name will become a part of the URL. According to the DNS rule, URLs do not support uppercase letters and cannot be used to access a bucket whose name contains uppercase letters. Therefore, a bucket name can contain only lowercase letters, digits, hyphens \(-\), and periods \(.\) For example, if you attempt to access bucket **MyBucket** using the URL, bucket **mybucket** will be accessed instead, causing an access error. - >- DNS naming can standardize the bucket naming globally, facilitating the resolution when accessing a bucket. Users can benefit from new functions and optimized features, and static website hosting is then applicable to buckets. - >- Once you create a bucket, you cannot change the name of it. Make sure that the bucket name you set is appropriate. + > **NOTE:** + >- When a URL is used to access a bucket, the bucket name will become a part of the URL. According to the DNS rule, URLs do not support uppercase letters and cannot be used to access a bucket whose name contains uppercase letters. Therefore, a bucket name can contain only lowercase letters, digits, hyphens \(-\), and periods \(.\) For example, if you attempt to access bucket **MyBucket** using the URL, bucket **mybucket** will be accessed instead, causing an access error. + >- DNS naming can standardize the bucket naming globally, facilitating the resolution when accessing a bucket. Users can benefit from new functions and optimized features, and static website hosting is then applicable to buckets. + >- Once you create a bucket, you cannot change the name of it. Make sure that the bucket name you set is appropriate. 4. Click **OK**. 5. In the displayed dialog box, click **Close** to close the dialog box. @@ -87,9 +87,9 @@ You can specify its storage class when creating a bucket or change its storage c 2. Select a bucket from the bucket list and click  on the right. The **Change Storage Class** dialog box is displayed. 3. Select the desired storage class and click **OK**. - > **NOTE:** - >- Changing the storage class of a bucket does not change the storage class of existing objects in the bucket. - >- When uploading an object, you can select a storage class for the object, which is the same as the bucket storage class by default. If the bucket storage class changes, the default object storage class changes accordingly. + > **NOTE:** + >- Changing the storage class of a bucket does not change the storage class of existing objects in the bucket. + >- An object inherits the bucket storage class by default, if no other storage class is specified for the object upon its upload. When the bucket storage class is changed, newly uploaded objects inherit the new bucket storage class by default. 4. In the displayed dialog box, click **Close** to close the dialog box. diff --git a/doc/source/obs/user-guide/adding-external-buckets.md b/doc/source/obs/user-guide/adding-external-buckets.md index 7f438f95..a228d41d 100644 --- a/doc/source/obs/user-guide/adding-external-buckets.md +++ b/doc/source/obs/user-guide/adding-external-buckets.md @@ -8,9 +8,9 @@ You have obtained the permissions to read and write the external bucket that you For example: Account **A** wants to add bucket **testbucket** of account **B**. Account **B** must authorize account **A** the permission to read bucket **testbucket**. If account **A** needs to upload object to bucket **testbucket**, account **B** needs to authorize account **A** the permission to write the bucket. Account **A** is the owner of the uploaded objects, and needs to authorize account **B** the permission to read and write the objects. -> **NOTE:** ->An external bucket \(version 3.0 or later\) can be added only when its standard bucket policy is set to **Public Read and Write**. ->If the standard bucket policy of an external bucket is set to **Public Read and Write** upon its creation, you need to manually change the standard bucket policy to **Private** and then change it back to **Public Read and Write** again, so that it can be added. +> **NOTE:** +>An external bucket \(version 3.0 or later\) can be added only when its standard bucket policy is set to **Public Read and Write**. +>If the standard bucket policy of an external bucket is set to **Public Read and Write** upon its creation, you need to manually change the standard bucket policy to **Private** and then change it back to **Public Read and Write** again, so that it can be added. ## Procedure diff --git a/doc/source/obs/user-guide/application-example-1-authorizing-access-permissions-required-for-adding-an-external-bucket-through.md b/doc/source/obs/user-guide/application-example-1-authorizing-access-permissions-required-for-adding-an-external-bucket-through.md index 3c42a778..fb867bbe 100644 --- a/doc/source/obs/user-guide/application-example-1-authorizing-access-permissions-required-for-adding-an-external-bucket-through.md +++ b/doc/source/obs/user-guide/application-example-1-authorizing-access-permissions-required-for-adding-an-external-bucket-through.md @@ -43,14 +43,14 @@ A bucket ACL can be used to grant the read and write access to a bucket. If only ## Procedure 1. Log in to OBS Console. -2. In the bucket list, click the bucket to be operated. The **Summary** page of the bucket is displayed. +2. In the bucket list, click the bucket to be operated. The **Overview** page of the bucket is displayed. 3. In the navigation pane on the left, click **Permissions** to go to the permission management page. 4. Click **Bucket ACL**. The **Bucket ACL** page is displayed. 5. Click **Add**, enter the account ID of the user that will add the bucket to OBS Browser, and select the read and write access to the bucket. - > **NOTE:** - >If you want to authorize such access to all users, in the **Public Permissions** area, authorize the **Anonymous User** the read and write access to the bucket. - >**Account ID** corresponds to **Domain ID** on the **My Credential** page. + > **NOTE:** + >If you want to authorize such access to all users, in the **Public Permissions** area, authorize the **Anonymous User** the read and write access to the bucket. + >**Account ID** corresponds to **Domain ID** on the **My Credential** page. 6. Click **Save**. diff --git a/doc/source/obs/user-guide/application-example-3-authorizing-access-permissions-required-for-adding-an-external-bucket-through.md b/doc/source/obs/user-guide/application-example-3-authorizing-access-permissions-required-for-adding-an-external-bucket-through.md index 2f6788b4..a11b56c1 100644 --- a/doc/source/obs/user-guide/application-example-3-authorizing-access-permissions-required-for-adding-an-external-bucket-through.md +++ b/doc/source/obs/user-guide/application-example-3-authorizing-access-permissions-required-for-adding-an-external-bucket-through.md @@ -65,12 +65,12 @@ If a custom bucket policy is used to authorize such permissions, the ListBucket,
If you select Other account, enter the account ID, which is the Domain ID on the My Credential page.
+If you select Other account, enter the account ID, which is the Domain ID on the My Credential page.
If you select Other account, enter the account ID, which is the Domain ID on the My Credential page.
+If you select Other account, enter the account ID, which is the Domain ID on the My Credential page.
Specifies the allowed header of cross-origin requests. This parameter is optional. Only CORS requests matching the allowed header are valid.
-You can enter multiple allowed headers (one per line) and each line can contain one wildcard character (*) at most. Spaces and special characters including &:< are not allowed.
+You can enter multiple allowed headers (one per line) and each line can contain one wildcard character (*) at most. Spaces and special characters including &:< are not allowed.
Mandatory; specifies the duration that your browser can cache CORS responses, expressed in seconds. The default value is 100.
+Mandatory. Specifies the duration that your browser can cache CORS responses, expressed in seconds. The default value is 100.
Object name prefix on which the redirection rule takes effect When a request is sent for accessing an object, the redirection rule takes effect if the object name prefix matches the value specified for this parameter.
+Object name prefix on which the redirection rule takes effect. When a request is sent for accessing an object, the redirection rule takes effect if the object name prefix matches the value specified for this parameter.
For example, to redirect the request for object ExamplePage.html, set the KeyPrefixEquals to ExamplePage.html.
Host name to which the redirection is pointed If this parameter is not specified, the request is redirected to the host from which the original request is initiated.
+Host name to which the redirection is pointed. If this parameter is not specified, the request is redirected to the host from which the original request is initiated.
HTTP status code returned to the redirection request The default value is 301, indicating that requests are permanently redirected to the location specified by Redirect. You can also set this parameter based on your service needs.
+HTTP status code returned to the redirection request. The default value is 301, indicating that requests are permanently redirected to the location specified by Redirect. You can also set this parameter based on your service needs.
| + | ++ | +
|---|---|
| + | +Geographic area where a bucket resides. For low network latency and quick resource access, select the nearest region. Once a bucket is created, the region cannot be changed. + |
+
| + | +Name of the bucket. The bucket name must be unique across all accounts and regions. Once a bucket is created, you cannot change its name. +An OBS bucket must be named according to the globally applied DNS naming rules as follows: +
|
+
| + | +Storage classes of a bucket. Different storage classes meet different requirements for storage performance and costs. +
For details, see Storage Classes Overview. + |
+
| + | +Controls read and write permissions for buckets. + + |
+
| + | +Tags are used to identify and classify buckets in OBS. Each tag is represented by a key-value pair. For more information, see Tag Overview. + |
+
+
+
| |||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| - | A credential refers to the identity credential used for user system authentication. In this example, password is selected.
|
|
9geNT}b&jlZ}fblPf&_nV60_l)uT*`mYbVO^U`Tvu&W4-J~&!?hNvxq5o zC#Wn^@EOBLYy9*$V59-*V5a8ymTHO*q+R|f%&jr;Vg@(3TG=eWGazf6N46W1n~`yn z%N;5t-i#vrWGSEmKl#5TtU?p_bF|l{>W-bEyTK>2eWc-KpA5*o7WmfURSeD+-w2(2 zprhx>e?VO0l-<$nh_x>G7V^Abv)wlCg!3;!{nzE&<#(>Ryp1 gqHl0>Y1dG_ykiqI#;J?+<$_K`#sF0OTED+WZ{^ zpz`cNG#Yq4i{5{@=fCrloDFp*PpM-+_LOz^vSI=_LEykaYczZeZIS-VAFP+0X5*7W zpFt1P2CWUHibiX@)!drhTfTXmC^o;ik-)1M{oz6XnOE^+>;L8tVTs?-d;zld_$i4x zhu@xhA#Vm;UY}02yTVX!vT(8n7#JBCXRr|pMQobCWJli}7vG&PU<~vPR4}0efXP8E ztu;_8)U$EKoP+!Kc(|DFdyd0Y0-|yLd^bkw?M 8al{%}UB>IfUFZ|}c zt+mN ( v*=TihEFxR9z2 zdNO2ZxUq{@J0}T$O-DimrU=6KMjkV=&b8g`Q{HB&T`K=FbGzy%F=o9piq*K472h@u zdDm8iXw2aim`VsS#hQ1MSQ4Ss(As}1l)c`xCznXaR{AblnzI(aY-?Npu+Dz3w1b$G z%$`X24Zaf^go!QvFl&$v1vAgH8zcRq`yy&L?Fpia={d`cMH|e;7eqlROAOtVQ0G7? z23tM%$g@5l8F|8YZ=o5d4AH1al2d2*av(h7SV#?vVYRD8R+fqVz)R-)D*Z6!ouSv2 zRb7L#4Fif1Y$`n$o0HwKnPb_cQS>C#b2liKymKgsNdQGbW`-SitHQS>tfy%8mo>V; z78zfBk$sgb9BuxwcSNY?%GnAkHceM4-COU8#ps{Hehds#2egjdS~cM_cYkM4H+D{j z3Cs?|WigXABmKWKo+>Oj4Lv#v<) SW!hV*^I3p?xyUEs z3;8ft?}wPMF%b}q&DoBSkELC|^ooRhdwe$Gv6~eh68pUz_&fY2g9ivlua9K zokgV}>=&8j@948z?vitv0ry@FNqW|JOHI%{5E6FDL{Ul-hct^)JntN;DB~8a!}Ff_ zFnY1D&HBKrymRhRG-sb1Kd5PK-LD#%-U#x2qVg-gmoEVfm?K@*-zJc#O@il{r z8u#;!EGof%E-$Z@-~`8A7!8#5^3#a`*-9y0a7&3Pm~rU+OkUS-(k$p9Zy5H)epOhI zXC$^()e{gV#b3PIVeH_R{N0awcyTATy~;=68Vc*VnVejnlB?V@Xrdf9lULI@;h>{O zYM>F}PEg*{Fbg5ugB~5*Y--Zub<(V9u1)M;tLDoRe;0M1o#OGHrI~jCBIQI;=n<4y z;`9OB7czhWU1QR!U^Kztq#+F4w)kf5jCBV)V*J$zY#8KT93iESwAIB1!W6YOX%0>` zvvP;(0!BC=ql={#6joc@Lz=fN3)-R*h~M9{?#s&mh}%$AfTJ173WS#GJ&TmLZW=on z1DM#dC| 2$&O&Vt2-0laOL+%!Vle97gV=*q#fhOm#ncu!cmXoD&`h2|K zbCZDcwPDD Z`;~K= zeAo5?FI 6t|}eh#QTZAJgMWO5HIdb(Smd>Ut_h|I!b>N zd#o7W7Be|wMz#;E z+$cL=4EiO>IqZH+D%zVijKuWTlyt@I|2SETWL)NxGM-VlqG!fzVzF)VyrdBMTMbmW*Tl$bzt zh5-bY*dT4!ceqH ~9U9$v-ezfMCr#3OEM@sy|XEBzHjKJ~4FB*{iaiQ7Por;=mm zAoz%HmX)6`TAcgc`W9 1|b8x55O1gE&6EBv##6VnarU0(zg$A)UP9 zSfxj^nv#@|^zb|EsqQzTjc=cNF{|OZAhAL>GyZPd4rc4`{@FaTaa456mDBX>;@uz| zVYfGL{gZ%lp7goRZZ2A|axz#CWEH~yk^R%x&+@^qheswPY~+=;smQrCf6q<( %++vMeJNl+|t_Kqccnr%0e4CrBh(i$i6Q%aV2tAF>U$2(uSW0>!3YdV5MD&>Y< z{Iw)p`2`v@&Vc(}{<+*BCTl##BWsx~(9P4rq}0DM>$(OBB2wlSp(U`g1`2L(MN|4J zv0gR#Z*$S|ORpR(`W6E$njHkhgO```IMe6FV#$sg^VVtV#hU6WFEiFqu}vG36Tl}6 zK1be9_We!u6Ic=hkD`{N3=74uHI_FM@bZTo$-JbQI^(mEW8~DodtoYAUTf?ZMw+px z^0vwj(1Em(lsksbqTKVPUc43@t8|~Pqo;FC_`+nr18P?^ &8;@_4<+3X#>+D7FnnZR=A?nOg$u-lbKEyK{I_>bRQI&!C# zpbLpTC)o9kvbXx^`yn&1MizU^XJ@p^uP SjNy&4%$%^Wywksbl0? zWUgv^+5LDmdH35{z2G+i@%`pNJmIP;BXQP9ulK4W*;=33L^`(i!*UnmM99*ltz+MZ z>4rEvS9rkf8@B2`^V&v=kE{=Aw~c{dBEBT&eV!Xhhdw-Bo_h$e_e+`Jr*ein3;Vao zgtXAd$i;KX$;nL#)snW460)yTu;y@uJAcXhBjA+h&wZJLf@2>jWgQU{HN(h%3Y~~a zqywv(XCCA@w~EsixMLe!;koQfnNZ@I_s4P0nQQe}pA4hA%3_XnPI6RCFCzAL!xe{> z9FZtu*GhYt>P`muR4lZPWyi0qa>Cilwg$9hO0Lq-wRmzEHPQx9z_ZVi^2nbF5SuK~ zf(|lb2{!j~X3{0IM`h81yX1hG@VvMkx!iRH@kBc%ne|#05x0~akrhVwAdcx|Q*Eob zgX_4_yedY0&V+BMQO0EE3}HcK0a^@P$8&$GmDabpsv8b7ngiS~SXWMorb@88pF!hS z3+Ak}ZnN+2g!VmdtB*Pe >CJG4rCv zYtwizN5?uQ5g#qJ?m?u3p<)B2!D6aI8uCdyVg2!NDAvL^G(JZDrB29~8Mu9<8uV-P z;?5ILhy)IB^5s@p;dC@eOSQ(C@*Mm_;Z81At(dV|Fe0AJ99z5j{WMrv9M{zpS0JR^ zv?#oGb8O|SSz4a&?9trcjP^iLOnFp=BdAft(8SHYRC^%x=CnIjOc~4NY&TmM6D(kx zpm^7zVt~kpl$}cft#pUCYrhaC+uz54h`n3Uk3@-43d6~_7VIoa93z}179+N)v^*zj zXR67gH*OhsA81*$HJT`bOl5cP9USFd{ig4EE+3=;jtuBQHIP0|$?1o!a#_vyanxW@ z)~DFl2wR%dF3TiRMU(H eX4Cw{ys&m(VTo1wN)OuGk;+~ z`Z9blz;c^>VsYm;>bZRG#T58NoEwinFkV*+`~~7Ipit?kjHuSa KCiNrjtTWwUJ`2CboPM0lMuy2I`vXUSCA{6`fj|6lf>W+ zI0va8gY#4jQ!R*qL}`o4Kts{rn-RNe7d7Lx^)&053a1d4ih}$AQ!cgU%8B `eV+YF4i3`#e>7(JV;i#zJfM$lPn8zwx6~bV6^mDJl8)92oGs3iM5Jr6`hRkyb z``)m%P1};Y7tAW&22Yd>Y?}q)HIpJ%R*#97sCF!^5s4{oNWPmhn6BnMQDE&GHoEp( zn;|`l%gp#MisRD7^7)!v-wb~kqN9neX*sH^;;>lfMWNRAyY~WVI$&Yjw%aWuJDvSB z{P)LTCECpJFsAs~!N1uZs+1`hr{nf=m3h3TokRTz+Inbnc%j!SU@Z-8MI0$~TCl)+ zlR?Hbh$LyBc%wlty6p`}8+TwZ*W?2ou4)740UFrP(hb` sL|ZQhy;>?p<4#fNBogce6w zBsdupwN@TjTSc;RpVD%lDs9d~G 0EATPcvc}&?M=|53IvJvUHvchkE3@jv1 zY52$DiqAi$o*T={2-Li_N-{))c)z!0O_1v(q&g1! 7K`my#+k{qcH@<9(1Scdw!cjSx zZj1{)!Z|NI(lYVt9Sd1?);h0q{XYMJzgt3lt>oX#$10~&E|Y1l#uGt7>9)8NZZqo3 zPNjQ@F8rCUm;^Wef|-d<)etT55*fNl7aSX!Mq)l3N%E-`5Rw!Rh(z#2QGQo|)|!#W z gLxsK2qkM^NM7i>fo@MDuo@N+#9k`zdoS-&O@i znjen;fmZH`NySvbI54pSR$kk8(T8vcE^M)0`jDxg^uv~D_^0V>Ol4dT_YS+;QBU+^ zYn4-{?6Ai-PZrol9&Rr6XXam_yaX*s0eXA38RmBLHp2ySI=)58Cd*!3KGbLhGl-bo zsCkf|^x$Hlv@d)^Ub5D#m3DovP1R%H484{Uo@jKa+q3c-w4n1ldhe#TeXC(7m`%o1 zDqIpsPWTjg{4Cq5515x< )`XF(dHKO z7@l~Jf&*Fr4QOhPAjP_$DPiWa+F6AZ(;^y>)rd0L^%}v}1OYk*LS9z2ESKk`dr_^_ zXE4c**B7Bq?F9s)+&;*mibTL>hJ(=@@ig_ WZ 1z|^I@9$%KCRk zmiMQgk#>QpUc@m|b~gF%_LHxr{he|<)%ScJBW6r8+;uNCS+8V~ZOld@{u0L|%tjHe zRkhqR^V$X#+nbJul|SYqnnm}0tK{>ILU}tmySMi6cujs!C8LDmv&YL1au%v&g$B9+ zDJO$uVIb47hp96Gwozksl+u$}@}p?vEldJCSIISGxOvB|_u}#5MZMWD1qSY4z20at zXd}2iw%ORT4NzWAaiKJ-@Pu 8M^Gj$bxBH`(eh46 mka85G~zkrW?95a9e ztBxUT3;AR%&j!#(Ait-IN;{gM vQ7rPZT6Zt~csnISFg%=xjrDrZMxL*@g6j7@GX1qXq7$AEnR$;_yZz!n%YBED5q z!!=#t^g-VhWyg?+INppoZ^=2`;De{cR7A|UvN` 4O#F1G9 n<%lP1`eBASfdSThJ}l2JqC;_xg!_Y8 z*k==#c*~)27s$UIxq(bn`eA)ben{JdL4HITfEd+RU9BJ$C490kW_M$}|Eyr>8Q`01 zTJm6mqFYoJiQR7kfR5{723!zCz>fnn8e>!z+vN2ktk9k{SG7{(W)?!Z5sb-Axe}e6 zD61M4Ocnwk&E!d(53#qA5I7r^b8RQBN}ie32V>fcJ6^t282T?IDj)+Kdm_6qecE b{=G4f78i~H(y_oLgfS_Q zD+jXa=m2X#y-SJ*ASs}Q<0X*7_d@;w0u%vg84?D%0xbl9jDYmAFyenXICbq;g|^$( z+QUrfXvCifvgG2&3pAkj#`yoR26Sj%aM~$65BUw0sBpxZgM?~y$J*NR&?C+jTF1}2 zS$@<4FNE2<4G%r7HhNA<9CCyns73UFtRAma0vkkC9u^dfrgIq9PQ3>y9Dc@$K!%o1 zhky+NR%XZ++B_3{4NhvHZ{qIQf8W%GM$Qv}07iU#m(u(tAY|&>>cI!&b-E;20&)(` zBXtjSLBkCK?B& z+;kRvfVjXpKg?l2Bs0j}l%XbFIKA z)#SHm^XMqJV;_drn-^1C^w}@Z2)PRU365xMQhqp;5Q}3) z#>{3>^Npc)HgGwOIi%0xXw2h N`|HfS~06xzl;jp47Dm#rXIz%L6oTfVUWc zBK1G>^8F3ev X$D=d|^3c<^ z-u7V&(9o~7nQwc585mP(Q6#PNmA|ZdwNSZU_i(}T`_HTUeTSy_e_LCIvjA|RF9?qm z1kNJSpBm$5y;>NMRDD1^Oybrbn|_xBVXu{AdFJXDP@jMoo^Hg)Oai_hkR2PF3)#Ou zok%`@N}subk!$Oy(~$(u!FA3WTXVJ_X)1^skxRbXuBwEbKFv=LDxM72HylqIs|R!& zq+_WRW#E2NoEU{^CwQo1)K8V^eow?vUj*Awyo*{pQ*fw!yP1$!W<;3hr)ohm2fLb7 z7^SS!(rz3hOh@$xjX5_N$%cb5bJ(vOnp6#wQ2} _2=^2gXI;hBYH3k&rj{kOM;EXWp$nokW_B#`pW>v|_+J;HL zI#RCHT*;VydCHOTnO7pFU`8#PFJO6_-gte~NxKD3Lxax7Xs_e%2ZfZ0S`?X_v-r6A zSG9>ah^1BT=I_mz+fo3@L0*}?^7_7Tam(P_k&6iz#z%{6XD@aT{8<;B7loN)*zvMK z1K^r>dH?=MS14Qj`Uc%yXFaC#lY0 ppZywgA*3nMH zyO3Zh#vY_E#WA10jV(BPgcWHNx?k6E-RkOrnGFQFObn% (rtS3BO^Pq*!yE;1lN;G6z z;wH<01`Z%texiKY76Er!KcVGhqrcgoje!bwDI)H1+v?}qpbyKwXtmx{-B55k)xi(C z0`)fXaT^LEPr+Jz=f$gaE3p9aZsaphqDBHmhkrNBng&>O8l8P^TfeBu{WS3K=Q={J z`ndhH<>i8mB#Y+Jlw;|zO?9DkrL1yy43+m_5w{4PtI+3bg`wk>40utYdV|>*xN7p0 zTFt6r#z%7h{%ydCY(w(6tn%9RuF#CxGjF!4$tz5u!$Eid*&RZ4Q5%szV{O}K!OflA zrx^2dGAyy=a9r=+d4-+K9d7$d_`FtDBOonSL&LFWjLa&TUEO1^JX&*+ZJac4>}t5a zkJXv4t0QTjrpOzZf1!yfn9n8+U9*%%I<7(qmcizoQdX1+iMX!w)E~1N_84FlLx#bl zC9JP^YUS!rEZ+heX3j1-S|K}>p!t$0#veMzZ6WI5us^6&XG@1q^
u7CbY?pyqGBZcPXEgKg_8H{ZT~Q(W_8^KOH+BKC|67&DJ)iW$IhGh?rOiEB zWztXeyOIC!YNONb$YkU74pgW_9R=k>+<_}`gYUNOo@o-Q9x_gw^c)M$CLJR%+XR;K zJH}Azi 5xDNBM>CUH$$P)&xxHE_@N%d0hEENE){wiE zDl}kB_sVW *9-CGi9L zvjm;;zHUhwM~uvL=97qyOb{R-f4vS0v0gYJpP-1lI?oS7H;hgZ#xrfeweO9tM~pN* z$)5>Sn~hBkPSqK{B?vZTA!Fp=cR68kY0Y20!2LRV6~#mxdySwEf4-buitC~@KQV%- zv!P`JhQ+{M78`#+9z~`S%3omftzg*-bh(Kn&QHj<_5Mm5P-ydNa)#%2CFGm$A1YYw zdWjrr6i_7G63Q1UM6m7i!Q2Hpl9PTdu2;x9ekAcXFg9A~36js^4Rii=ghNYRPfZq+ z4J~0fswX1M_mzaKIiBqJ{^udsN2j|q<5mybW@M7m=mKOs{vQT22V*A?X57>y CWqk*2HFUZU!)BCWz$V&gJ~!;B7f$G% C3!=7 4~TFlZXze!ug9}?m{`kx2uTMrh4gl32P*Y z5gAkbUGolLJ9ETq*K>=PY&fC3yn^6F{y_hu(Pw#%ux_dTd%yPLjJvriK0^EHe9)Eh zoQS=?N41(zPUGbSpt65UjXtA)JhM>(V@1hG9O-pw6L$S}dZ-O*Vo*`}20t$Hce+PR zl)RXH92`ai44%J--)Sp!086k9z_x1c>}B5Y))0`bI#Zu3%`@ZKq#l6>k${zdSE8bI zmPKp}Y|OtX{@L}^+V#}hx!VaqM@;pCk%V?FnnO@oJ7cZOM?ve1sp@$^yQ R<0oeW%@5Ay)i=||&Eu{C5p}aSQnA>Ul>J!X zpP5 H;0{WvD80gT$=$}0v5Tk|_eHHfwI?X3kcEYhq5Bmw&x9-<4HbAk+QROy8RsMpe~ z16 c%Up*oi4#|TRcnbC8l;Nn7aV{U3Ib68bJ!spxceBD6h8WA=I^4S zR`sqyhHI45!5a bE@x5(lUA5urMkCAPgG@O;Ir&&fz)%ll2d=FEyXzyj^= zW(FOZ9lXoW?`e8Htl8LSt`tHpai2y3F8!NZ^^8{B!?A7aSE9>#GX3p#{P?Epf=W91 zbz?aI@n1Az?H7epqgU5l&Pt^~ymz{sZdz-6j6C6En{g$Kv93n0>wKpS&~vMuY1i z(L^Jys%R)FFs-1}cM`NgTb%gvIu3)tnX*%_~^ExSYeS)BQzM-9c<6uAbsUTp>lV zzOOw55fb!^E^z1F(bvYq1i(63$-l%%pxSO&*qc36+=%Csbb1dIr|Pe5YMkL81A$Oc z@%oPWPVpGw*j5A7>>d*$ssTvXRoQ+FanvCoTs2kjQgMTD#@2BS5roOYGUHa N%Pe~J3O&}g6F(Run2WVFNyEUd-UT>~!>$|Oa^Yaw}mWuFrG6G7Q j9?nS!Db{wp_au@=_%8e}iur&)Hy}uh%Zn9#(DD2~6GM<# diff --git a/doc/source/obs/user-guide/getting_started.rst b/doc/source/obs/user-guide/getting_started.rst deleted file mode 100644 index b271b540..00000000 --- a/doc/source/obs/user-guide/getting_started.rst +++ /dev/null @@ -1,16 +0,0 @@ -=============== -Getting Started -=============== - - -.. toctree:: - :maxdepth: 1 - - - process-description-(console).md - configuring-user-permissions-(console).md - creating-a-bucket-(getting-started).md - uploading-a-file-(getting-started).md - downloading-a-file-(getting-started).md - deleting-a-file-(console-getting-started).md - deleting-a-bucket-(console-getting-started).md diff --git a/doc/source/obs/user-guide/granting-an-iam-user-with-the-operation-permissions-for-a-specified-bucket.md b/doc/source/obs/user-guide/granting-an-iam-user-with-the-operation-permissions-for-a-specified-bucket.md index 0ebb16aa..123063aa 100644 --- a/doc/source/obs/user-guide/granting-an-iam-user-with-the-operation-permissions-for-a-specified-bucket.md +++ b/doc/source/obs/user-guide/granting-an-iam-user-with-the-operation-permissions-for-a-specified-bucket.md @@ -53,7 +53,7 @@ The following is an example about how to authorize an IAM user with the bucket a 7. Click **Create Bucket Policy**. The **Create Bucket Policy** dialog box is displayed. 8. Set the following parameters to authorize the IAM user with the permission to upload objects to the bucket. - > **NOTE:** + > **NOTE:** >Before authorizing the IAM user with the permission to operate objects, ensure that the user has the permission to access the bucket. **Table 2** Parameters for authorizing the permission to upload objects diff --git a/doc/source/obs/user-guide/granting-other-accounts-with-the-operation-permissions-for-a-specified-bucket.md b/doc/source/obs/user-guide/granting-other-accounts-with-the-operation-permissions-for-a-specified-bucket.md index fb115fb8..9daf0616 100644 --- a/doc/source/obs/user-guide/granting-other-accounts-with-the-operation-permissions-for-a-specified-bucket.md +++ b/doc/source/obs/user-guide/granting-other-accounts-with-the-operation-permissions-for-a-specified-bucket.md @@ -4,6 +4,12 @@ The bucket owner \(root account\) or other accounts and IAM users, who have the The following is an example about how to authorize other accounts with the bucket access and object upload permissions. +> **NOTE:** +>To grant permissions to IAM users under other accounts, you need to configure a bucket policy and also IAM policies. +>1. Configure a bucket policy to allow IAM users to access the bucket. +>2. Configure IAM policies for the account to which the authorized IAM user belongs, to allow the IAM user to access the bucket. +>Only permissions that are allowed by both the bucket policy and IAM policies can take effect. + ## Procedure 1. In the bucket list, click the bucket to be operated. The **Overview** page of the bucket is displayed. @@ -54,7 +60,7 @@ The following is an example about how to authorize other accounts with the bucke 7. Click **Create Bucket Policy**. The **Create Bucket Policy** dialog box is displayed. 8. Set the following parameters to authorize another account with the permission to upload objects: - > **NOTE:** + > **NOTE:** >Before authorizing the user with the permission to operate objects, ensure that the user has the permission to access the bucket. **Table 2** Parameters for authorizing the permission to upload objects diff --git a/doc/source/obs/user-guide/how-can-i-control-access-permissions-for-obs.md b/doc/source/obs/user-guide/how-can-i-control-access-permissions-for-obs.md index 56355fef..e6fe5069 100644 --- a/doc/source/obs/user-guide/how-can-i-control-access-permissions-for-obs.md +++ b/doc/source/obs/user-guide/how-can-i-control-access-permissions-for-obs.md @@ -19,14 +19,14 @@ You can use the following mechanisms to control access permissions for OBS: - Bucket Policy - A bucket policy is attached to a bucket and objects in the bucket. By leveraging bucket policies, the owner of a bucket can authorize IAM users or other accounts the permissions to operate the bucket and objects in the bucket. + A bucket policy applies to the configured OBS bucket and objects in the bucket. An OBS bucket owner can use a bucket policy to grant permissions of buckets and objects in the buckets to IAM users or other accounts. - Object Policy - In a bucket policy, you can configure resources to which the bucket policy applies. You can use the asterisk \(\*\) to indicate all objects in the bucket or specify an object name prefix, so that the policy applies to objects that share the specified name prefix. An object policy is directly configured for the selected object. + An object policy is a policy that applies to objects in a bucket. In a bucket policy, you can specify a set of objects as the resources to which the bucket policy applies, or you can use asterisk symbol \(\*\) to indicate all objects in the bucket. To configure an object policy, select an object, and then configure the object policy directly for the object. - Access Control List \(ACL\) - ACLs control the read and write permissions for accounts, whose permission granularity is not as fine as bucket policies and IAM policies. Generally, it is recommended that you use IAM policies and bucket policies for access control. + ACLs control read and write permissions for accounts, which are not as fine-grained as bucket policies and IAM policies. Therefore, you are advised to use IAM policies and bucket policies for access control. diff --git a/doc/source/obs/user-guide/how-do-i-obtain-the-access-path-to-an-object.md b/doc/source/obs/user-guide/how-do-i-obtain-the-access-path-to-an-object.md index 6c7f91d2..a9dfd8b6 100644 --- a/doc/source/obs/user-guide/how-do-i-obtain-the-access-path-to-an-object.md +++ b/doc/source/obs/user-guide/how-do-i-obtain-the-access-path-to-an-object.md @@ -36,6 +36,6 @@ You can combine path manually or use the following tools to obtain the path: -> **NOTE:** ->If the object access path is user-assembled, you need to escape the object name by referring to the URL encoding rules. +> **NOTE:** +>If the object access path is user-assembled, you need to escape the object name by referring to the URL encoding rules. diff --git a/doc/source/obs/user-guide/iam-policies.md b/doc/source/obs/user-guide/iam-policies.md index 109a3f4d..f744f320 100644 --- a/doc/source/obs/user-guide/iam-policies.md +++ b/doc/source/obs/user-guide/iam-policies.md @@ -17,7 +17,7 @@ IAM policies are used to authorize IAM users under an account. ## Policy Structure and Syntax -A policy consists of a Version and a Statement. Each policy can have multiple statements. +A policy consists of a version and statements. Each policy can have multiple statements. **Figure 1** Policy structure  @@ -60,7 +60,7 @@ Policy syntax example: @@ -75,8 +75,8 @@ The authentication of IAM policies starts from the Deny statements. The follow **Figure 2** Authentication logic  -> **NOTE:** ->The actions in each policy bear the OR relationship. +> **NOTE:** +>The actions in each policy bear the OR relationship. 1. A user accesses the system and makes an operation request. 2. The system evaluates all the permission policies assigned to the user. diff --git a/doc/source/obs/user-guide/index.md b/doc/source/obs/user-guide/index.md new file mode 100644 index 00000000..72e79873 --- /dev/null +++ b/doc/source/obs/user-guide/index.md @@ -0,0 +1,287 @@ +# User Guide + +- [Service Overview] + - [About OBS](about-obs.md) + - [Advantages](advantages.md) + - [Application Scenarios](application-scenarios.md) + - [Permissions Management](permissions-management.md) + - [Using OBS](using-obs.md) + - [Related Services](related-services.md) + - [Basic Concepts] + - [Objects](objects.md) + - [Buckets](buckets.md) + - [Access Keys \(AK/SK\)](access-keys-(ak-sk).md) + - [Endpoints and Domain Names](endpoints-and-domain-names.md) + - [Region and AZ](region-and-az.md) + +- [OBS Console Operation Guide] + - [Console Function Overview](console-function-overview.md) + - [Web Browser Versions Supported by OBS Console](web-browser-versions-supported-by-obs-console.md) + - [Getting Started] + - [Process Description](process-description-(console).md) + - [Configuring User Permissions](configuring-user-permissions-(console).md) + - [Creating a Bucket](creating-a-bucket-(getting-started).md) + - [Uploading a File](uploading-a-file-(getting-started).md) + - [Downloading a File](downloading-a-file-(getting-started).md) + - [Deleting a File](deleting-a-file-(console-getting-started).md) + - [Deleting a Bucket](deleting-a-bucket-(console-getting-started).md) + + - [Storage Classes Overview](storage-classes-overview-(console).md) + - [Managing Buckets] + - [Creating a Bucket](creating-a-bucket.md) + - [Viewing Basic Information of a Bucket](viewing-basic-information-of-a-bucket-(console).md) + - [Searching for a Bucket](searching-for-a-bucket.md) + - [Deleting a Bucket](deleting-a-bucket-(console).md) + + - [Managing Objects] + - [Creating a Folder](creating-a-folder-(console).md) + - [Uploading a File](uploading-a-file.md) + - [Downloading a File](downloading-a-file.md) + - [Searching for a File or Folder](searching-for-a-file-or-folder-(console).md) + - [Accessing an Object Using Its URL](accessing-an-object-using-its-url.md) + - [Restoring a Cold File Stored in OBS](restoring-a-cold-file-stored-in-obs.md) + - [Deleting a File or Folder](deleting-a-file-(console).md) + - [Undeleting a File](undeleting-a-file.md) + - [Managing Fragments](managing-fragments-(console).md) + + - [Server-Side Encryption] + - [Server-Side Encryption Overview](server-side-encryption-overview-(console).md) + - [Uploading a File with Server-Side Encryption](uploading-a-file-with-server-side-encryption-(console).md) + + - [Object Metadata] + - [Object Metadata Overview](object-metadata-overview.md) + - [Configuring Object Metadata](configuring-object-metadata.md) + + - [Permission Control] + - [Overview](permission-control-overview-(console).md) + - [Permission Control Mechanisms] + - [IAM Policies](iam-policies.md) + - [Bucket Policies and Object Policies](bucket-policies-and-object-policies.md) + - [Bucket ACLs and Object ACLs](bucket-acls-and-object-acls.md) + - [Relationship Between a Bucket ACL and a Bucket Policy](relationship-between-a-bucket-acl-and-a-bucket-policy.md) + - [How Does Authorization Work When Multiple Access Control Mechanisms Co-Exist?](how-does-authorization-work-when-multiple-access-control-mechanisms-co-exist.md) + + - [Bucket Policy Parameters] + - [Effect](effect.md) + - [Principal](principal.md) + - [Resources](resources.md) + - [Actions](actions.md) + - [Conditions](conditions.md) + + - [Configuring IAM Policies] + - [Creating a User and Granting OBS Permissions](creating-a-user-and-granting-obs-permissions.md) + + - [Configuring a Bucket Policy] + - [Configuring a Standard Bucket Policy](configuring-a-standard-bucket-policy.md) + - [Configuring a Custom Bucket Policy \(Common Mode\)](configuring-a-custom-bucket-policy-(common-mode).md) + - [Configuring a Custom Bucket Policy \(Coding Mode\)](configuring-a-custom-bucket-policy-(coding-mode).md) + + - [Configuring an Object Policy](configuring-an-object-policy.md) + - [Configuring a Bucket ACL](configuring-a-bucket-acl-(console).md) + - [Configuring an Object ACL](configuring-an-object-acl.md) + - [Application Cases] + - [Granting an IAM User with the Operation Permissions for a Specified Bucket](granting-an-iam-user-with-the-operation-permissions-for-a-specified-bucket.md) + - [Granting Other Accounts with the Operation Permissions for a Specified Bucket](granting-other-accounts-with-the-operation-permissions-for-a-specified-bucket.md) + - [Restricting Bucket Access to a Specified Address ](restricting-bucket-access-to-a-specified-address.md) + - [Configuring the Start Time and End Time of Access to Objects in a Bucket](configuring-the-start-time-and-end-time-of-access-to-objects-in-a-bucket.md) + - [Authorizing Access Permissions to Anonymous Users](authorizing-access-permissions-to-anonymous-users.md) + - [Authorizing Folder Access Permissions to Anonymous Users](authorizing-folder-access-permissions-to-anonymous-users.md) + + - [Versioning] + - [Versioning Overview](versioning-overview.md) + - [Configuring Versioning](configuring-versioning.md) + + - [Logging] + - [Logging Overview](logging-overview-(console).md) + - [Configuring Access Logging for a Bucket](configuring-access-logging-for-a-bucket.md) + + - [Tags] + - [Tag Overview](tag-overview.md) + - [Configuring Tags](configuring-tags.md) + + - [Event Notification] + - [SMN-Enabled Event Notification](smn-enabled-event-notification.md) + - [Configuring SMN-Enabled Event Notification](configuring-smn-enabled-event-notification.md) + - [Application Example: Configuring SMN-Enabled Event Notification](application-example-configuring-smn-enabled-event-notification.md) + + - [Lifecycle Management] + - [Lifecycle Management Overview](lifecycle-management-overview-(console).md) + - [Configuring a Lifecycle Rule](configuring-a-lifecycle-rule-(console).md) + + - [Static Website Hosting] + - [Static Website Hosting Overview](static-website-hosting-overview.md) + - [Redirection Overview](redirection-overview.md) + - [Configuring Static Website Hosting](configuring-static-website-hosting.md) + - [Configuring Redirection](configuring-redirection.md) + - [Using a User-Defined Domain Name to Configure Static Website Hosting](using-a-user-defined-domain-name-to-configure-static-website-hosting.md) + + - [CORS] + - [CORS Overview](cors-overview-(console).md) + - [Configuring CORS](configuring-cors.md) + + - [URL Validation] + - [URL Validation Overview](url-validation-overview.md) + - [Configuring URL Validation](configuring-url-validation.md) + + - [Cloud Trace Service](cloud-trace-service.md) + - [Task Management](task-management-(console).md) + - [Troubleshooting] + - [An Object Fails to Be Downloaded Using Internet Explorer 11](an-object-fails-to-be-downloaded-using-internet-explorer-11.md) + - [OBS Console Cannot Be Opened in Internet Explorer 9](obs-console-cannot-be-opened-in-internet-explorer-9.md) + - [The Object Name Changes After an Object with a Long Name Is Downloaded to a Local Computer](the-object-name-changes-after-an-object-with-a-long-name-is-downloaded-to-a-local-computer.md) + - [Failed to Configure Event Notification](failed-to-configure-event-notification.md) + - [Time Difference Is Longer Than 15 Minutes Between the Client and Server](time-difference-is-longer-than-15-minutes-between-the-client-and-server.md) + + - [List of OBS Error Codes](list-of-obs-error-codes-(console).md) + +- [OBS Browser Operation Guide] + - [Introduction to OBS Browser] + - [OBS Browser Overview](obs-browser-overview.md) + - [Function Description](function-description.md) + + - [Getting Started] + - [Process Description](process-description.md) + - [Configuring User Permissions](configuring-user-permissions-(browser).md) + - [Downloading OBS Browser](downloading-obs-browser.md) + - [Creating Access Keys \(AK and SK\)](creating-access-keys-(ak-and-sk).md) + - [Logging In to OBS Browser](logging-in-to-obs-browser.md) + - [Adding a Bucket](adding-a-bucket-(getting-started).md) + - [Uploading a File or Folder](uploading-a-file-or-folder-(browser).md) + - [Downloading a File or Folder](downloading-a-file-or-folder-(getting-started).md) + - [Deleting a File or Folder](deleting-a-file-(browser-getting-started).md) + - [Deleting a Bucket](deleting-a-bucket-(browser-getting-started).md) + + - [Storage Classes Overview](storage-classes-overview-(browser).md) + - [Managing Buckets] + - [Bucket Management Methods](bucket-management-methods.md) + - [Adding a Bucket](adding-a-bucket.md) + - [Searching for a Bucket](searching-for-a-bucket-2.md) + - [Viewing Basic Information of a Bucket](viewing-basic-information-of-a-bucket-(browser).md) + - [Managing Fragments](managing-fragments.md) + - [Deleting a Bucket](deleting-a-bucket-(browser).md) + + - [Managing Objects] + - [Object Management Methods](object-management-methods.md) + - [Creating a Folder](creating-a-folder-(browser).md) + - [Uploading a File or Folder](uploading-a-file-or-folder.md) + - [Downloading a File or Folder](downloading-a-file-or-folder.md) + - [Accessing an Object Using Its Object URL](accessing-an-object-using-its-object-url.md) + - [Searching for a File or Folder](server-side-encryption-overview-(browser).md) + - [Deleting a File or Folder](deleting-a-file-(browser).md) + - [Restoring a Cold File in OBS](restoring-a-cold-file-in-obs.md) + + - [Server-Side Encryption] + - [Server-Side Encryption Overview](server-side-encryption-overview-(browser).md) + - [Uploading a File with Server-Side Encryption](uploading-a-file-with-server-side-encryption.md) + + - [Permission Control] + - [Overview](permission-control-overview-(browser).md) + - [Configuring a Bucket Policy](configuring-a-bucket-policy.md) + - [Configuring a Bucket ACL](configuring-a-bucket-acl-(browser).md) + + - [Lifecycle Management] + - [Lifecycle Management Overview](lifecycle-management-overview-(browser).md) + - [Configuring a Lifecycle Rule](configuring-a-lifecycle-rule-(browser).md) + + - [CORS] + - [CORS Overview](cors-overview-(browser).md) + - [Configuring CORS](configuring-cors-(browser).md) + + - [Logging] + - [Logging Overview](logging-overview-(browser).md) + - [Configuring Logging](configuring-logging.md) + + - [External Buckets] + - [External Buckets Overview](external-buckets-overview.md) + - [Adding External Buckets](adding-external-buckets.md) + - [Application Example 1: Authorizing Access Permissions Required for Adding an External Bucket Through the Bucket ACL](application-example-1-authorizing-access-permissions-required-for-adding-an-external-bucket-through.md) + - [Application Example 2: Authorizing Access Permissions Required for Adding an External Bucket Through the Standard Bucket Policy](application-example-2-authorizing-access-permissions-required-for-adding-an-external-bucket-through.md) + - [Application Example 3: Authorizing Access Permissions Required for Adding an External Bucket Through the Custom Bucket Policy](application-example-3-authorizing-access-permissions-required-for-adding-an-external-bucket-through.md) + + - [Task Management](task-management.md) + - [Related Operations] + - [Configuring the System](configuring-the-system.md) + - [Managing Accounts](managing-accounts.md) + - [Updating OBS Browser](updating-obs-browser.md) + + - [Troubleshooting] + - [Login Page of OBS Browser Does Not Respond upon User Login](login-page-of-obs-browser-does-not-respond-upon-user-login.md) + - [No Upload Task Is Created After a Large Number of Files Are Selected for Upload On OBS Browser](no-upload-task-is-created-after-a-large-number-of-files-are-selected-for-upload-on-obs-browser.md) + - [Blue or Black Screen of Death Occurs During File Upload on OBS Browser](blue-or-black-screen-of-death-occurs-during-file-upload-on-obs-browser.md) + - [Tasks Are Not Displayed in the Task List When Objects Are Managed Using OBS Browser](tasks-are-not-displayed-in-the-task-list-when-objects-are-managed-using-obs-browser.md) + - [Time Difference Is Longer Than 15 Minutes Between the Client and the Server](time-difference-is-longer-than-15-minutes-between-the-client-and-the-server.md) + - [An Error Occurs During the Start-up of OBS Browser, Indicating That the Task Management Function Cannot Work Properly Due to Unavailability of the Database](an-error-occurs-during-the-start-up-of-obs-browser-indicating-that-the-task-management-function-cann.md) + + - [List of OBS Error Codes](list-of-obs-error-codes-(browser).md) + +- [FAQs] + - [OBS Basics] + - [How Can I Use OBS?](how-can-i-use-obs.md) + - [How Do I Obtain An OBS Endpoint?](how-do-i-obtain-an-obs-endpoint.md) + - [What Are the Advantages of Object Storage When Compared with SAN and NAS Storage?](what-are-the-advantages-of-object-storage-when-compared-with-san-and-nas-storage.md) + - [Which Types of Data Can Be Stored in OBS?](which-types-of-data-can-be-stored-in-obs.md) + - [What Is the Data Volume That I Can Store in OBS?](what-is-the-data-volume-that-i-can-store-in-obs.md) + - [Can Folders in OBS Be Used the Same Way in a File System?](can-folders-in-obs-be-used-the-same-way-in-a-file-system.md) + - [Where Is Data Stored in OBS?](where-is-data-stored-in-obs.md) + - [What Is the Relationship Between OBS Bucket Names and OBS Domain Names?](what-is-the-relationship-between-obs-bucket-names-and-obs-domain-names.md) + - [Does OBS Support Access over HTTPS?](does-obs-support-access-over-https.md) + - [Can Other Users Access My Data Stored in OBS?](can-other-users-access-my-data-stored-in-obs.md) + - [Does OBS Support Resumable Data Transfer?](does-obs-support-resumable-data-transfer.md) + - [Does OBS Support Batch Upload?](does-obs-support-batch-upload.md) + - [Does OBS Support Batch Download?](does-obs-support-batch-download.md) + - [Does OBS Support Batch Deletion of Objects?](does-obs-support-batch-deletion-of-objects.md) + - [What Are the Factors that Affect the Upload and Download Speed of OBS?](what-are-the-factors-that-affect-the-upload-and-download-speed-of-obs.md) + - [Why Does Data Stored on OBS Get Lost?](why-does-data-stored-on-obs-get-lost.md) + - [Can Deleted Data Be Recovered?](can-deleted-data-be-recovered.md) + - [Will Data Remanence Exist in OBS After I Delete Data?](will-data-remanence-exist-in-obs-after-i-delete-data.md) + - [Does OBS Provide Multi-AZ Reliability?](does-obs-provide-multi-az-reliability.md) + + - [Access Control] + - [How Can I Control Access Permissions for OBS?](how-can-i-control-access-permissions-for-obs.md) + - [What Are the Differences Between an IAM Policy and a Bucket Policy in Access Control?](what-are-the-differences-between-an-iam-policy-and-a-bucket-policy-in-access-control.md) + - [What Is the Relationship Between a Bucket Policy and an Object Policy?](what-is-the-relationship-between-a-bucket-policy-and-an-object-policy.md) + + - [Buckets and Objects] + - [Failed to Create a Bucket](failed-to-create-a-bucket.md) + - [Failed to Upload an Object](failed-to-upload-an-object.md) + - [Failed to Download an Object](failed-to-download-an-object.md) + - [Failure in Deleting a Bucket](failure-in-deleting-a-bucket.md) + - [Bucket Storage Class vs. Object Storage Class](bucket-storage-class-vs-object-storage-class.md) + - [Can I Modify the Region of a Bucket?](can-i-modify-the-region-of-a-bucket.md) + - [How Do I Obtain the Access Path to an Object?](how-do-i-obtain-the-access-path-to-an-object.md) + - [Objects in a Bucket Cannot Be Searched For](objects-in-a-bucket-cannot-be-searched-for.md) + + - [Security] + - [How Is Data Security Ensured in OBS?](how-is-data-security-ensured-in-obs.md) + - [Does OBS Scan My Data for Other Purposes?](does-obs-scan-my-data-for-other-purposes.md) + - [Can Background Management Personnel Export My Data from OBS?](can-background-management-personnel-export-my-data-from-obs.md) + - [How Does OBS Prevent My Data from Being Stolen?](how-does-obs-prevent-my-data-from-being-stolen.md) + - [Can a Pair of AK and SK Be Replaced When They Are Being Used to Access OBS?](can-a-pair-of-ak-and-sk-be-replaced-when-they-are-being-used-to-access-obs.md) + - [Can a Pair of AK and SK Be Used by Multiple Users to Access OBS?](can-a-pair-of-ak-and-sk-be-used-by-multiple-users-to-access-obs.md) + - [Which Encryption Technologies Are Supported by OBS?](which-encryption-technologies-are-supported-by-obs.md) + + - [How Do I Use Fragment Management?] + - [Why Are Fragments Generated?](why-are-fragments-generated.md) + - [How Do I Manage Fragments?](how-do-i-manage-fragments.md) + + - [How Do I Use Versioning?] + - [Can I Upload an Object to a Folder Where a Namesake Object Already Exists?](can-i-upload-an-object-to-a-folder-where-a-namesake-object-already-exists.md) + - [Can I Recover a Deleted Object?](can-i-recover-a-deleted-object.md) + + - [How Do I Use Tags?] + - [Can I Search for a Bucket by Tag?](can-i-search-for-a-bucket-by-tag.md) + - [What Can I Do with Tags?](what-can-i-do-with-tags.md) + + - [Event Notification] + - [Which Events Can Trigger Event Notifications?](which-events-can-trigger-event-notifications.md) + + - [How Do I Use Lifecycle Management?] + - [What Are the Application Scenarios of Lifecycle Management?](what-are-the-application-scenarios-of-lifecycle-management.md) + + - [How Do I Use Static Website Hosting?] + - [Can OBS Host My Static Websites?](can-obs-host-my-static-websites.md) + - [Which Types of Websites Are Suitable for Static Website Hosting in OBS?](which-types-of-websites-are-suitable-for-static-website-hosting-in-obs.md) + - [How Do I Obtain the Static Website Hosting Address of a Bucket?](how-do-i-obtain-the-static-website-hosting-address-of-a-bucket.md) + +- [Glossary](glossary.md) + diff --git a/doc/source/obs/user-guide/index.rst b/doc/source/obs/user-guide/index.rst deleted file mode 100644 index e4192566..00000000 --- a/doc/source/obs/user-guide/index.rst +++ /dev/null @@ -1,14 +0,0 @@ -========== -User Guide -========== - - -.. toctree:: - :maxdepth: 1 - - - service_overview - obs_console_operation_guide - obs_browser_operation_guide - faqs - glossary.md diff --git a/doc/source/obs/user-guide/lifecycle_management.rst b/doc/source/obs/user-guide/lifecycle_management.rst deleted file mode 100644 index 7a56afe3..00000000 --- a/doc/source/obs/user-guide/lifecycle_management.rst +++ /dev/null @@ -1,11 +0,0 @@ -===================== -Lifecycle Management -===================== - - -.. toctree:: - :maxdepth: 1 - - - lifecycle-management-overview-(console).md - configuring-a-lifecycle-rule-(console).md diff --git a/doc/source/obs/user-guide/logging-overview-(browser).md b/doc/source/obs/user-guide/logging-overview-(browser).md index 3ba7d9eb..206c586e 100644 --- a/doc/source/obs/user-guide/logging-overview-(browser).md +++ b/doc/source/obs/user-guide/logging-overview-(browser).md @@ -4,8 +4,7 @@ You can enable logging to facilitate analysis or audit as required. Access logs The logging function itself is offered for free, only the space occupied by log files is charged. -> **NOTICE:** ->After logging is enabled, the log delivery user will be automatically granted the permission to read the bucket ACL and write the bucket where logs are saved. If you manually disable such permissions, bucket logging fails. +After logging is enabled, the log delivery user will be automatically granted the permission to read the bucket ACL and write the bucket where logs are saved. If you manually disable such permissions, bucket logging fails. OBS can record bucket access requests in logs for request analysis and log audit. @@ -81,7 +80,7 @@ The access log of each bucket contains the following information. Permissions defined by a policy, including Effect and Action.
- Effect
The valid values for Effect are Allow and Deny. System policies contain only Allow statements.
-- Action
Permissions of specific operations on resources . A policy can contain one or more permissions. The wildcard (*) is allowed to indicate all of the services, resource types, or operations depending on its location in the action.
+- Action
Permissions of specific operations on resources. A policy can contain one or more permissions. The wildcard (*) is allowed to indicate all of the services, resource types, or operations depending on its location in the action.
- + diff --git a/doc/source/obs/user-guide/logging-overview-(console).md b/doc/source/obs/user-guide/logging-overview-(console).md index 63ce0523..b5d107e1 100644 --- a/doc/source/obs/user-guide/logging-overview-(console).md +++ b/doc/source/obs/user-guide/logging-overview-(console).md @@ -4,8 +4,7 @@ You can enable logging to facilitate analysis or audit as required. Access logs The logging function itself is offered for free, only the space occupied by log files is charged. -> **NOTICE:** ->After logging is enabled, the log delivery user will be automatically granted the permission to read the bucket ACL and write the bucket where logs are saved. If you manually disable such permissions, bucket logging fails. +After logging is enabled, the log delivery user will be automatically granted the permission to read the bucket ACL and write the bucket where logs are saved. If you manually disable such permissions, bucket logging fails. OBS can record bucket access requests in logs for request analysis and log audit. @@ -81,7 +80,7 @@ The access log of each bucket contains the following information. - + diff --git a/doc/source/obs/user-guide/logging.rst b/doc/source/obs/user-guide/logging.rst deleted file mode 100644 index f629b667..00000000 --- a/doc/source/obs/user-guide/logging.rst +++ /dev/null @@ -1,11 +0,0 @@ -======== -Logging -======== - - -.. toctree:: - :maxdepth: 1 - - - logging-overview-(console).md - configuring-access-logging-for-a-bucket.md diff --git a/doc/source/obs/user-guide/managing-fragments-(console).md b/doc/source/obs/user-guide/managing-fragments-(console).md index a91af2ca..b3f724de 100644 --- a/doc/source/obs/user-guide/managing-fragments-(console).md +++ b/doc/source/obs/user-guide/managing-fragments-(console).md @@ -4,19 +4,19 @@ Fragments are generated when multipart upload tasks fail. Such failures generally occur in the following scenarios: -- The network is in poor condition, and the connection to the OBS server is interrupted frequently. +- The network is in poor conditions, and the connection to the OBS server is interrupted frequently. - The upload task is manually suspended. - The device is faulty. - The device is powered off suddenly. On OBS Console, storage used by fragments is charged. Clear fragments when they are not needed. If a file upload task fails, upload the file again. -> **NOTICE:** ->Fragments on OBS consume storage spaces that are charged according to price rates of storage space. +> **NOTICE:** +>Fragments on OBS consume storage spaces that are charged according to price rates of storage space. ## Procedure -1. In the bucket list, click the bucket to be operated. The **Summary** page of the bucket is displayed. +1. In the bucket list, click the bucket to be operated. The **Overview** page of the bucket is displayed. 2. In the navigation pane on the left, click **Objects**. 3. Click **Fragments**, select the fragment that you want to delete, and then click **Delete** on the right of the fragment. diff --git a/doc/source/obs/user-guide/managing-fragments.md b/doc/source/obs/user-guide/managing-fragments.md index 5291cf19..0800d7ba 100644 --- a/doc/source/obs/user-guide/managing-fragments.md +++ b/doc/source/obs/user-guide/managing-fragments.md @@ -13,8 +13,8 @@ If a file fails to be uploaded or the upload task is suspended, fragments are ge You can also use the fragment management function to clear fragments. If you resume an upload task after clearing the fragments, the upload progress will be lost and the task needs to be re-uploaded. -> **NOTICE:** ->The fragment storage in OBS is billed. +> **NOTICE:** +>The fragment storage in OBS is billed. ## Procedure diff --git a/doc/source/obs/user-guide/managing_buckets.rst b/doc/source/obs/user-guide/managing_buckets.rst deleted file mode 100644 index 375eaba8..00000000 --- a/doc/source/obs/user-guide/managing_buckets.rst +++ /dev/null @@ -1,13 +0,0 @@ -================= -Managing Buckets -================= - - -.. toctree:: - :maxdepth: 1 - - - creating-a-bucket.md - viewing-basic-information-of-a-bucket-(console).md - searching-for-a-bucket.md - deleting-a-bucket-(console).md diff --git a/doc/source/obs/user-guide/managing_objects.rst b/doc/source/obs/user-guide/managing_objects.rst deleted file mode 100644 index 0472ebe2..00000000 --- a/doc/source/obs/user-guide/managing_objects.rst +++ /dev/null @@ -1,17 +0,0 @@ -================= -Managing Objects -================= - -.. toctree:: - :maxdepth: 1 - - - creating-a-folder-(console).md - uploading-a-file.md - downloading-a-file.md - searching-for-a-file-or-folder-(console).md - accessing-an-object-using-its-url.md - restoring-a-cold-file-stored-in-obs.md - deleting-a-file-(console).md - undeleting-a-file.md - managing-fragments-(console).md diff --git a/doc/source/obs/user-guide/object-metadata-overview.md b/doc/source/obs/user-guide/object-metadata-overview.md index 8cdb6838..a01a1484 100644 --- a/doc/source/obs/user-guide/object-metadata-overview.md +++ b/doc/source/obs/user-guide/object-metadata-overview.md @@ -4,7 +4,7 @@ Object metadata is a set of name-value pairs that are part of object management. Currently, only the metadata defined by the system is supported. -The metadata defined by the system is classified into the following types: system-controlled and user-controlled. For example, metadata such as **Last-Modified** is controlled by the system and cannot be modified. Users can modify the metadata such as **ContentLanguage** through the API. The metadata that can be modified by users is described as follows: +The metadata defined by the system is classified into the following types: system-controlled and user-controlled. For example, metadata such as **Last-Modified** is controlled by the system and cannot be modified. You can call the API to modify the metadata such as **ContentLanguage**. The metadata that can be modified is described as follows: **Table 1** OBS metadata @@ -38,7 +38,7 @@ The metadata defined by the system is classified into the following types: syste -> **NOTE:** ->- When versioning is enabled for a bucket, you can set metadata for objects which are **Latest Version**, but cannot set metadata for objects which are **Historical Version**. ->- You cannot set object metadata for a **Cold** object. +> **NOTE:** +>- When versioning is enabled for a bucket, you can set metadata for objects which are **Latest Version**, but cannot set metadata for objects which are **Historical Version**. +>- You cannot set object metadata for a **Cold** object. diff --git a/doc/source/obs/user-guide/object_metadata.rst b/doc/source/obs/user-guide/object_metadata.rst deleted file mode 100644 index 0b5c0e50..00000000 --- a/doc/source/obs/user-guide/object_metadata.rst +++ /dev/null @@ -1,10 +0,0 @@ -================ -Object Metadata -================ - - -.. toctree:: - :maxdepth: 1 - - object-metadata-overview.md - configuring-object-metadata.md diff --git a/doc/source/obs/user-guide/obs_browser_operation_guide.rst b/doc/source/obs/user-guide/obs_browser_operation_guide.rst deleted file mode 100644 index d9ee409a..00000000 --- a/doc/source/obs/user-guide/obs_browser_operation_guide.rst +++ /dev/null @@ -1,208 +0,0 @@ -============================ -OBS Browser Operation Guide -============================ - - -Introduction to OBS Browser -============================ - - -.. toctree:: - :maxdepth: 1 - - obs-browser-overview.md - function-description.md - - -Getting Started -================ - - -.. toctree:: - :maxdepth: 1 - - - process-description.md - configuring-user-permissions-(browser).md - downloading-obs-browser.md - creating-access-keys-(ak-and-sk).md - logging-in-to-obs-browser.md - adding-a-bucket-(getting-started).md - uploading-a-file-or-folder-(browser).md - downloading-a-file-or-folder-(getting-started).md - deleting-a-file-(browser-getting-started).md - deleting-a-bucket-(browser-getting-started).md - - -Storage Classes Overview -========================= - - -.. toctree:: - :maxdepth: 1 - - - storage-classes-overview-(browser).md - - -Managing Buckets -================= - - -.. toctree:: - :maxdepth: 1 - - - bucket-management-methods.md - adding-a-bucket.md - searching-for-a-bucket-2.md - viewing-basic-information-of-a-bucket-(browser).md - managing-fragments.md - deleting-a-bucket-(browser).md - - -Managing Objects -================= - - -.. toctree:: - :maxdepth: 1 - - - object-management-methods.md - creating-a-folder-(browser).md - uploading-a-file-or-folder.md - downloading-a-file-or-folder.md - accessing-an-object-using-its-object-url.md - searching-for-a-file-or-folder-(browser).md - deleting-a-file-(browser).md - restoring-a-cold-file-stored-in-obs.md - - -Server-Side Encryption -======================= - - -.. toctree:: - :maxdepth: 1 - - - server-side-encryption-overview-(browser).md - uploading-a-file-with-server-side-encryption.md - - -Permission Control -=================== - - -.. toctree:: - :maxdepth: 1 - - - permission-control-overview-(browser).md - configuring-a-bucket-policy.md - configuring-a-bucket-acl-(browser).md - - -Lifecycle Management -==================== - - -.. toctree:: - :maxdepth: 1 - - - lifecycle-management-overview-(browser).md - configuring-a-lifecycle-rule-(browser).md - - -CORS -===== - - -.. toctree:: - :maxdepth: 1 - - cors-overview-(browser).md - configuring-cors-(browser).md - - -Logging -======== - - -.. toctree:: - :maxdepth: 1 - - - logging-overview-(browser).md - configuring-logging.md - - -External Buckets -================= - - -.. toctree:: - :maxdepth: 1 - - - external-buckets-overview.md - adding-external-buckets.md - application-example-1-authorizing-access-permissions-required-for-adding-an-external-bucket-through.md - application-example-2-authorizing-access-permissions-required-for-adding-an-external-bucket-through.md - application-example-3-authorizing-access-permissions-required-for-adding-an-external-bucket-through.md - - - -Task Management -================= - - -.. toctree:: - :maxdepth: 1 - - - task-management.md - - -Related Operations -================== - - -.. toctree:: - :maxdepth: 1 - - - - configuring-the-system.md - managing-accounts.md - updating-obs-browser.md - - -Troubleshooting -================ - - -.. toctree:: - :maxdepth: 1 - - - login-page-of-obs-browser-does-not-respond-upon-user-login.md - no-upload-task-is-created-after-a-large-number-of-files-are-selected-for-upload-on-obs-browser.md - blue-or-black-screen-of-death-occurs-during-file-upload-on-obs-browser.md - tasks-are-not-displayed-in-the-task-list-when-objects-are-managed-using-obs-browser.md - time-difference-is-longer-than-15-minutes-between-the-client-and-the-server.md - an-error-occurs-during-the-start-up-of-obs-browser-indicating-that-the-task-management-function-cann.md - - - -List of OBS Error Codes -======================== - - -.. toctree:: - :maxdepth: 1 - - - list-of-obs-error-codes-(browser).md diff --git a/doc/source/obs/user-guide/obs_console_operation_guide.rst b/doc/source/obs/user-guide/obs_console_operation_guide.rst deleted file mode 100644 index e3f9d061..00000000 --- a/doc/source/obs/user-guide/obs_console_operation_guide.rst +++ /dev/null @@ -1,30 +0,0 @@ -=========================== -OBS Console Operation Guide -=========================== - - -.. toctree:: - :maxdepth: 1 - - console-function-overview.md - web-browser-versions-supported-by-obs-console.md - getting_started - storage-classes-overview-(console).md - managing_buckets - managing_objects - server_side_encryption - object_metadata - permission_control - versioning - logging - tags - event_notification - lifecycle_management - static_website_hosting - cors - url_validation - cloud-trace-service.md - task-management-(console).md - troubleshooting - list-of-obs-error-codes-(console).md - diff --git a/doc/source/obs/user-guide/permission-control-overview-(browser).md b/doc/source/obs/user-guide/permission-control-overview-(browser).md index be74efad..f3d133f9 100644 --- a/doc/source/obs/user-guide/permission-control-overview-(browser).md +++ b/doc/source/obs/user-guide/permission-control-overview-(browser).md @@ -135,7 +135,7 @@ A bucket or object ACL can assign the following users the read and write permiss -> **NOTE:** ->Every time you change the bucket or object access permission setting in an ACL, it overwrites the existing setting instead of adding a new access permission to the bucket or object. ->Fragment management refers to the deletion of fragments. For the bucket owner and users who have the permission to initiate multipart tasks, deleting fragments is not restricted by bucket ACL settings. If a user has the permission to write, the user also has the permission to initiate multipart tasks. +> **NOTE:** +>Every time you change the bucket or object access permission setting in an ACL, it overwrites the existing setting instead of adding a new access permission to the bucket or object. +>Fragment management refers to the deletion of fragments. For the bucket owner and users who have the permission to initiate multipart tasks, deleting fragments is not restricted by bucket ACL settings. If a user has the permission to write, the user also has the permission to initiate multipart tasks. diff --git a/doc/source/obs/user-guide/permission-control-overview-(console).md b/doc/source/obs/user-guide/permission-control-overview-(console).md index d67917c2..bd40b126 100644 --- a/doc/source/obs/user-guide/permission-control-overview-(console).md +++ b/doc/source/obs/user-guide/permission-control-overview-(console).md @@ -5,7 +5,7 @@ OBS supports the following permission control mechanisms: - IAM policies: IAM policies define the actions that can be performed on your cloud resources. In other words, IAM policies specify what actions are allowed or denied. - Bucket policies and object policies: - A bucket policy is attached to a bucket and objects in the bucket. By leveraging bucket policies, the owner of a bucket can authorize IAM users or other accounts the permissions to operate the bucket and objects in the bucket. + A bucket policy applies to the configured bucket and objects in the bucket. A bucket owner can use a bucket policy to grant permissions of buckets and objects in the buckets to IAM users or other accounts. An object policy applies to specified objects in a bucket. diff --git a/doc/source/obs/user-guide/permission_control.rst b/doc/source/obs/user-guide/permission_control.rst deleted file mode 100644 index 0c13a563..00000000 --- a/doc/source/obs/user-guide/permission_control.rst +++ /dev/null @@ -1,116 +0,0 @@ -=================== -Permission Control -=================== - - -Overview -========= - - -.. toctree:: - :maxdepth: 1 - - - - permission-control-overview-(console).md - - -Permission Control Mechanisms -============================= - - -.. toctree:: - :maxdepth: 1 - - - iam-policies.md - bucket-policies-and-object-policies.md - bucket-acls-and-object-acls.md - relationship-between-a-bucket-acl-and-a-bucket-policy.md - how-does-authorization-work-when-multiple-access-control-mechanisms-co-exist.md - - -Bucket Policy Parameters -========================= - - -.. toctree:: - :maxdepth: 1 - - effect.md - principal.md - resources.md - actions.md - conditions.md - - -Configuring IAM Policies -========================= - - -.. toctree:: - :maxdepth: 1 - - - creating-a-user-and-granting-obs-permissions.md - - -Configuring a Bucket Policy -=========================== - - -.. toctree:: - :maxdepth: 1 - - - configuring-a-standard-bucket-policy.md - configuring-a-custom-bucket-policy-(common-mode).md - configuring-a-custom-bucket-policy-(coding-mode).md - - -Configuring an Object Policy -============================ - - -.. toctree:: - :maxdepth: 1 - - - configuring-an-object-policy.md - - -Configuring a Bucket ACL -======================== - - -.. toctree:: - :maxdepth: 1 - - - configuring-a-bucket-acl-(console).md - - -Configuring Object ACL -====================== - - -.. toctree:: - :maxdepth: 1 - - configuring-an-object-acl.md - - -Application Cases -================== - - -.. toctree:: - :maxdepth: 1 - - granting-an-iam-user-with-the-operation-permissions-for-a-specified-bucket.md - granting-other-accounts-with-the-operation-permissions-for-a-specified-bucket.md - restricting-bucket-access-to-a-specified-address.md - configuring-the-start-time-and-end-time-of-access-to-objects-in-a-bucket.md - authorizing-access-permissions-to-anonymous-users.md - authorizing-folder-access-permissions-to-anonymous-users.md - diff --git a/doc/source/obs/user-guide/permissions-management.md b/doc/source/obs/user-guide/permissions-management.md index 276daa5b..dc3a23e4 100644 --- a/doc/source/obs/user-guide/permissions-management.md +++ b/doc/source/obs/user-guide/permissions-management.md @@ -1,21 +1,21 @@ # Permissions Management -If you have Object Storage Service \(OBS\) resources and you need to grant different access permissions to different user roles, you can leverage the Identity and Access Management \(IAM\) service for fine-grained permission control. IAM provides identity authentication, permissions management, and access control, helping you provide secure access to your cloud resources. +If you have OBS resources and you need to grant different access permissions to different user roles, you can leverage the Identity and Access Management \(IAM\) service for fine-grained permission control. IAM provides identity authentication, permissions management, and access control, helping you provide secure access to your cloud resources. -With IAM, you can use your account to create IAM users, and assign permissions to the users to control their access to specific resources. For example, if you have software developers and you want to grant them the permission to only access OBS and not delete OBS resources, you can create an IAM policy that only grants the developers the permission to access OBS. +With IAM, you can use your account to create IAM users, and assign permissions to the users to control their access to specific resources. For example, if you have software developers and you want to grant them the permission to only access OBS but not delete OBS resources, you can create an IAM policy that only grants the developers the permission to access OBS. If your service account does not have individual IAM users, please skip this section. ## OBS Permissions -By default, new IAM users do not have any permissions assigned. You need to add a user to one or more user groups, and assign permissions policies to the user groups. The user then inherits permissions from the user groups. This process is known as authorization. After authorization, the user can perform specific operations on cloud services based on permission policies. IAM provides preset system policies that define common permissions for different services. +By default, new IAM users do not have any permissions assigned. You need to add a user to one or more user groups, and assign permission policies to the user groups. The user then inherits permissions from the user groups. This process is known as authorization. After authorization, the user can perform specific operations on cloud services based on permission policies. IAM provides preset system policies that define common permissions for different services. OBS is a global service because it is available for all physical regions. OBS permissions are assigned to users in the Global project, and users do not need to switch the region when accessing OBS. RBAC policy: An RBAC policy consists of permissions for an entire service. Users in a group with such a policy assigned are granted all the required permissions, including permissions for accessing and managing that service. RBAC policies do not support operation-specific permission control. -> **NOTE:** ->Due to the cache mechanism, it takes about 13 minutes for the RBAC policy to take effect after being granted to users and user groups. +> **NOTE:** +>Due to data caching, an RBAC policy involving OBS actions will take effect 10 to 15 minutes after it is attached to a user and user group. [Table 1](#table358116162418) lists all system policies of OBS. @@ -32,7 +32,7 @@ RBAC policy: An RBAC policy consists of permissions for an entire service. Users - Operation permissions: Any operation on all cloud resources owned by the account.
+Operation permissions: any operation on all cloud resources owned by the account
@@ -40,7 +40,7 @@ RBAC policy: An RBAC policy consists of permissions for an entire service. Users - - Operation permissions: Read-only access permission to all cloud resources owned by the account
+Operation permissions: read-only access permission to all cloud resources owned by the account
@@ -110,7 +110,7 @@ The following table lists operations that can be performed under each set of OBS + - @@ -119,7 +119,7 @@ The following table lists operations that can be performed under each set of OBS + - @@ -254,7 +254,7 @@ The following table lists operations that can be performed under each set of OBS + - @@ -380,7 +380,7 @@ The following table lists operations that can be performed under each set of OBS + - @@ -389,7 +389,7 @@ The following table lists operations that can be performed under each set of OBS + -## OBS Resource Permission Management +## Managing OBS Resource Permissions Access to OBS buckets and objects can be controlled by IAM user permissions, bucket policies, and ACLs. diff --git a/doc/source/obs/user-guide/principal.md b/doc/source/obs/user-guide/principal.md index a62ef267..e631cf42 100644 --- a/doc/source/obs/user-guide/principal.md +++ b/doc/source/obs/user-guide/principal.md @@ -15,16 +15,16 @@ This parameter specifies users on whom the bucket policy takes effect, including When the **Principal** is set to **Other account**, you can enter the ID of other accounts. If you want to apply the bucket policy to IAM users in that account, you need to enter the user IDs, and use commas \(,\) to separate one from another. - > **NOTE:** - >An authorized user can go to the **My Credential** page to obtain the domain ID and user ID after login. - >For **Account ID**, input the **Domain ID** that can be found on the **My Credential** page. + > **NOTE:** + >An authorized user can go to the **My Credential** page to obtain the domain ID and user ID after login. + >For **Account ID**, input the **Domain ID** that can be found on the **My Credential** page. - Anyone \(anonymous users\) To grant the bucket access permission to anyone, set the **Principal** to **Other account** and enter an asterisk \(\*\) as the account ID. - > **CAUTION:** - >Exercise caution when granting the bucket access permissions to anonymous users. If you grant the bucket access permission to anonymous users, anyone can access your bucket, and the traffic and storage fees generated will be borne by the bucket owner \(cloud service account\). You are advised to set restrictions on access requests. For example, you can allow the access request from only one IP address. + > **CAUTION:** + >Exercise caution when granting the bucket access permissions to anonymous users. If you grant the bucket access permission to anonymous users, anyone can access your bucket, and the traffic and storage fees generated will be borne by the bucket owner \(cloud service account\). You are advised to set restrictions on access requests. For example, you can allow the access request from only one IP address. ## Federated User diff --git a/doc/source/obs/user-guide/resources.md b/doc/source/obs/user-guide/resources.md index 45a0b645..46ecc7e4 100644 --- a/doc/source/obs/user-guide/resources.md +++ b/doc/source/obs/user-guide/resources.md @@ -1,6 +1,6 @@ # Resources -The resource can be the current entire bucket or one or more objects in the bucket. +The resource can be the current entire bucket, an object, or a set of objects in the bucket. Resources can be specified in either of the following ways: @@ -9,7 +9,7 @@ Resources can be specified in either of the following ways: ## Specifying Bucket Resources -To specify the current bucket as the resource, keep the resource text box empty. Only the current bucket can be specified. Actions configured in this bucket policy must be bucket related actions. +To specify the current bucket as the resource, keep the resource text box empty. When configuring actions for the policy, select bucket related actions. ## Specifying Object Resources @@ -31,6 +31,6 @@ When objects in the bucket are specified as the resources, actions configured in -> **NOTE:** ->Use commas \(,\) to separate one object \(or object set\) from another. +> **NOTE:** +>Use commas \(,\) to separate one object \(or object set\) from another. diff --git a/doc/source/obs/user-guide/restoring-a-cold-file-stored-in-obs.md b/doc/source/obs/user-guide/restoring-a-cold-file-stored-in-obs.md index d8f7f9c9..4bbed4c3 100644 --- a/doc/source/obs/user-guide/restoring-a-cold-file-stored-in-obs.md +++ b/doc/source/obs/user-guide/restoring-a-cold-file-stored-in-obs.md @@ -16,7 +16,7 @@ You need to restore a **Cold** object before downloading it, accessing it usin You can select multiple files and click **Restore** above the file list to batch restore the files. - > **NOTE:** + > **NOTE:** >Objects that are being restored cannot be added for batch restoration. **Figure 1** Restoring an object @@ -54,7 +54,7 @@ You need to restore a **Cold** object before downloading it, accessing it usin You can click  to manually refresh the restoration status. - > **NOTE:** + > **NOTE:** >The system checks the file restoration status at UTC 00:00 everyday. The system starts counting down the expiration time from the time when the latest check is complete. @@ -62,5 +62,6 @@ You need to restore a **Cold** object before downloading it, accessing it usin Within the validity period of a restored object, you can restore the object again. Then the validity period is extended because it will start from the time when the latest restoration is complete. -> **NOTE:** +> **NOTE:** >If a restored object is restored again, its expiration time should be later than the time set for the previous restoration. + diff --git a/doc/source/obs/user-guide/searching-for-a-bucket.md b/doc/source/obs/user-guide/searching-for-a-bucket.md index ee9cba29..9b24da55 100644 --- a/doc/source/obs/user-guide/searching-for-a-bucket.md +++ b/doc/source/obs/user-guide/searching-for-a-bucket.md @@ -2,8 +2,8 @@ This section describes how to search for a bucket by its name. -> **NOTE:** ->Currently, searching for buckets by tag is not supported. +> **NOTE:** +>Currently, searching for buckets by tag is not supported. ## Procedure @@ -17,7 +17,7 @@ This section describes how to search for a bucket by its name. ## Related Operations -In the bucket list, you can click  in each column to sort buckets by name, storage class, region, storage usage, and creation time. +In the bucket list, you can click  in each column to sort buckets by name, storage class, region, storage usage, or creation time. In the bucket list, you can display buckets in a specific region by clicking  to filter regions. diff --git a/doc/source/obs/user-guide/searching-for-a-file-or-folder-(browser).md b/doc/source/obs/user-guide/searching-for-a-file-or-folder-(browser).md index 6442b871..3e27cbd7 100644 --- a/doc/source/obs/user-guide/searching-for-a-file-or-folder-(browser).md +++ b/doc/source/obs/user-guide/searching-for-a-file-or-folder-(browser).md @@ -10,7 +10,7 @@ This section describes how to search for a file or folder by name prefix on OBS In the root directory of the bucket, files and folders whose name starts with the specified prefix are displayed. - > **NOTE:** + > **NOTE:** >If you want to search for objects within a folder, you can use either of the following methods: >- In the search box of the root directory, enter _folder path_/_object name prefix_. For example, if you enter **abc/123/example**, all files and folders whose name is prefixed with **example** in the **abc/123** folder are displayed. >- Alternatively, you can open the specific folder, and enter the object name prefix in the search box of that folder. For example, you can open the **abc/123** folder and enter **example** in the search box. Then all files and folders whose name is prefixed with **example** in the **abc/123** folder are displayed. diff --git a/doc/source/obs/user-guide/searching-for-a-file-or-folder-(console).md b/doc/source/obs/user-guide/searching-for-a-file-or-folder-(console).md index 1e9ed902..ff4b7933 100644 --- a/doc/source/obs/user-guide/searching-for-a-file-or-folder-(console).md +++ b/doc/source/obs/user-guide/searching-for-a-file-or-folder-(console).md @@ -10,7 +10,7 @@ This section describes how to search for a file or folder by name prefix on OBS In the root directory of the bucket, files and folders whose name starts with the specified prefix are displayed. - > **NOTE:** + > **NOTE:** >If you want to search for objects within a folder, you can use either of the following methods: >- In the search box of the root directory, enter _folder path_/_object name prefix_. For example, if you enter **abc/123/example**, all files and folders whose name is prefixed with **example** in the **abc/123** folder are displayed. >- Alternatively, you can open the specific folder, and enter the object name prefix in the search box of that folder. For example, you can open the **abc/123** folder and enter **example** in the search box. Then all files and folders whose name is prefixed with **example** in the **abc/123** folder are displayed. diff --git a/doc/source/obs/user-guide/server_side_encryption.rst b/doc/source/obs/user-guide/server_side_encryption.rst deleted file mode 100644 index 449a28d9..00000000 --- a/doc/source/obs/user-guide/server_side_encryption.rst +++ /dev/null @@ -1,11 +0,0 @@ -======================= -Server-Side Encryption -======================= - - -.. toctree:: - :maxdepth: 1 - - - server-side-encryption-overview-(console).md - uploading-a-file-with-server-side-encryption-(console).md diff --git a/doc/source/obs/user-guide/service_overview.rst b/doc/source/obs/user-guide/service_overview.rst deleted file mode 100644 index 8f8aa65f..00000000 --- a/doc/source/obs/user-guide/service_overview.rst +++ /dev/null @@ -1,30 +0,0 @@ -================= -Service Overview -================= - - -.. toctree:: - :maxdepth: 1 - - - about-obs.md - advantages.md - application-scenarios.md - permissions-management.md - using-obs.md - related-services.md - - -Basic Concepts -============== - - -.. toctree:: - :maxdepth: 1 - - - objects.md - buckets.md - access-keys-(ak-sk).md - endpoints-and-domain-names.md - region-and-az.md diff --git a/doc/source/obs/user-guide/smn-enabled-event-notification.md b/doc/source/obs/user-guide/smn-enabled-event-notification.md index b1a1f4ab..2673ed45 100644 --- a/doc/source/obs/user-guide/smn-enabled-event-notification.md +++ b/doc/source/obs/user-guide/smn-enabled-event-notification.md @@ -11,3 +11,47 @@ For details about events supported by SMN and how to configure an SMN-enabled ev **Figure 1** SMN-enabled event notification  +The message structure of an SMN notification is as follows: + +``` +{ + "Records":[ + { + "eventVersion":"", //Version number. The current version is 2.0. + "eventSource":"", //Message source. The value is fixed to aws:s3. + "awsRegion":"", //Region where the event occurs + "eventTime":"", //Time when an event occurs, in the ISO-8601 format, for example, 2020-07-10T09:24:11.418Z + "eventName":"", //Name of the event that triggers the notification + "userIdentity":{ + "principalId":"" //Billing ID of the user who triggers the event + }, + "requestParameters":{ + "sourceIPAddress":"" //Source IP address of the request + }, + "responseElements":{ + "x-amz-request-id":"", //ID of the request + "x-amz-id-2":"" ///Special characters for locating problems + }, + "s3":{ + "s3SchemaVersion":"1.0", + "configurationId":"", //Name of the event notification rule in OBS that matches the event + "bucket":{ + "name":"", //Bucket name + "ownerIdentity":{ + "PrincipalId":"" //Domain ID of the bucket owner + }, + "arn":"" //Unique identifier of a bucket. The format is arn:aws:s3:::bucketname. + }, + "object":{ + "key":"", //Object name + "eTag":"", //ETag of the object + "size": , //Object size + "versionId":"", //Version ID of the object + "sequencer":"" //Identifier that defines the event sequence of a specific object + } + } + } + ] +} +``` + diff --git a/doc/source/obs/user-guide/static_website_hosting.rst b/doc/source/obs/user-guide/static_website_hosting.rst deleted file mode 100644 index fa8fce00..00000000 --- a/doc/source/obs/user-guide/static_website_hosting.rst +++ /dev/null @@ -1,14 +0,0 @@ -======================= -Static Website Hosting -======================= - - -.. toctree:: - :maxdepth: 1 - - - static-website-hosting-overview.md - redirection-overview.md - configuring-static-website-hosting.md - configuring-redirection.md - using-a-user-defined-domain-name-to-configure-static-website-hosting.md diff --git a/doc/source/obs/user-guide/storage-classes-overview-(browser).md b/doc/source/obs/user-guide/storage-classes-overview-(browser).md index eb7608ff..c8488d6d 100644 --- a/doc/source/obs/user-guide/storage-classes-overview-(browser).md +++ b/doc/source/obs/user-guide/storage-classes-overview-(browser).md @@ -19,41 +19,41 @@ Changing the storage class of a bucket does not change the storage classes of ex ## Comparison of Storage Classes - @@ -419,7 +419,7 @@ The following table lists operations that can be performed under each set of OBS