opentelekomcloud · MrGourd · Sep 30, 2020
@@ -13,7 +13,7 @@ You can create a pair of permanent AK and SK on the  **My Credentials**  page.
 
 **Temporary AK/SK Pair**
 
-Temporary AK/SK and security token are temporary access tokens issued by the system to users. The validity period is between 15 minutes and 24 hours. Temporary AK/SK and security token comply with the least privilege principle and can be used to access OBS temporarily. Error code 403 is returned if an access request does not have the security token.
+A temporary AK/SK pair and the security token are temporary access tokens granted by the system to users. The validity period of the tokens ranges from 15 minutes to 24 hours. After the tokens expire, you need to obtain the tokens again. A temporary AK/SK pair and the security token comply with the least privilege principle and can only be used to temporarily access OBS. A 403 error will be returned if the security token is not available.
 
 -   Temporary AK: indicates the ID of a temporary access key. It is the unique ID associated with the SK. The AK and SK are used together to obtain an encrypted signature for a request.
 -   Temporary SK: indicates the temporary private key used together with its associated temporary AK. The AK and SK are used together to identify a request sender to prevent the request from being modified.

@@ -4,7 +4,7 @@ The object uniform resource locator \(URL\) \(object sharing\) function allows a
 
 ## Prerequisites<a name="s4ecf44968672497286abe0738d6b2171"></a>
 
-An anonymous user has been assigned with the permission to read the specified object. For details, see [Authorizing Access Permissions to Anonymous Users](authorizing-access-permissions-to-anonymous-users.md).
+An anonymous user has been assigned with the permission to read the specified object. For details, see  [Configuring an Object ACL](configuring-an-object-acl.md).
 
 ## Procedure<a name="sd8bcdd98f0554dc48154e4f9625aa3c7"></a>
 
@@ -18,9 +18,9 @@ An anonymous user has been assigned with the permission to read the specified ob
     -   If you select  **Other object storage services**  when logging in to OBS Browser, the object URL is in the format of https://_storage server IP address_  or  _domain name_/_bucket name_/_directory level_/_object name_. If the object is in the root directory of the bucket, the URL does not contain a  _directory level_.
     -   If you select  **OBS**  when logging in to OBS Browser, the object URL is in the format of https://_bucket name.domain name_/_directory level_/_object name._  If the object is in the root directory of the bucket, the URL does not contain a  _directory level_.
 
-    >![](/images/icon-note.gif) **NOTE:**   
-    >To allow anonymous users to access objects stored in a bucket of Cold storage class using the URL, ensure that the objects are in the  **Restored**  state.  
-    >The method of using a browser to access objects varies depending on the object type. You can directly open  **.txt**  and  **.html**  files using a browser. However, when you open  **.exe**  and  **.dat**  files using a browser, the files are automatically downloaded to your local computer.  
+    >![](public_sys-resources/icon-note.gif) **NOTE:** 
+    >To allow anonymous users to access objects stored in a bucket of Cold storage class using the URL, ensure that the objects are in the  **Restored**  state.
+    >The method of using a browser to access objects varies depending on the object type. You can directly open  **.txt**  and  **.html**  files using a browser. However, when you open  **.exe**  and  **.dat**  files using a browser, the files are automatically downloaded to your local computer.
 
 4.  Click  **Copy**  to copy the URL of the object.
 5.  In the displayed dialog box, click  **Close**  to close the dialog box.

@@ -4,14 +4,14 @@ If you set the permission for an object to allow anonymous users to read it, ano
 
 ## Prerequisites<a name="section30275088154354"></a>
 
-A read permission has been set for anonymous users. For details about how to set the permission, see  [Authorizing Access Permissions to Anonymous Users](authorizing-access-permissions-to-anonymous-users.md).
+A read permission has been set for anonymous users. For details about how to enable the permission, see  [Authorizing Access Permissions to Anonymous Users](authorizing-access-permissions-to-anonymous-users.md).
 
->![](/images/icon-note.gif) **NOTE:**   
->Encrypted objects cannot be shared.  
+>![](public_sys-resources/icon-note.gif) **NOTE:** 
+>Encrypted objects cannot be shared.
 
 ## Procedure<a name="section5800216"></a>
 
-1.  In the bucket list, click the bucket to be operated. The  **Summary**  page of the bucket is displayed.
+1.  In the bucket list, click the bucket to be operated. The  **Overview**  page of the bucket is displayed.
 2.  In the navigation pane on the left, click  **Objects**.
 3.  Click the object to be shared. The object information is displayed on the top part of the page. The  **Link**  displays the shared link of the object. For details, see  [Figure 1](#fig36534596192426).
 
@@ -20,8 +20,8 @@ A read permission has been set for anonymous users. For details about how to set
     **Figure  1**  Object link<a name="fig36534596192426"></a>  
     ![](figures/object-link.png "object-link")
 
-    >![](/images/icon-note.gif) **NOTE:**   
-    >-   To allow anonymous users to access objects whose storage classes are  **Cold**  using the URL, ensure that the objects are in the  **Restored**  state.  
-    >-   The method of using a browser to access objects varies depending on the object type. You can directly open  **.txt**  and  **.html**  files using a browser. However, when you open  **.exe**  and  **.dat**  files using a browser, the files are automatically downloaded to your local computer.  
+    >![](public_sys-resources/icon-note.gif) **NOTE:** 
+    >-   To allow anonymous users to access objects whose storage classes are  **Cold**  using the URL, ensure that the objects are in the  **Restored**  state.
+    >-   The method of using a browser to access objects varies depending on the object type. You can directly open  **.txt**  and  **.html**  files using a browser. However, when you open  **.exe**  and  **.dat**  files using a browser, the files are automatically downloaded to your local computer.
 
 
@@ -2,8 +2,8 @@
 
 A bucket is a container that stores objects in OBS. Before you store data in OBS, you need to create a bucket first.
 
->![](/images/icon-note.gif) **NOTE:**   
->On OBS Console, an account can have 100 buckets.  
+>![](public_sys-resources/icon-note.gif) **NOTE:** 
+>On OBS Console, an account can have 100 buckets. There is no such upper limit if you use the API or other methods to create buckets. However, these buckets also take up the bucket quota on OBS Console.
 
 ## Procedure<a name="section166665169537"></a>
 

@@ -2,8 +2,8 @@
 
 Buckets are containers that store objects in OBS. Before you store data in OBS, you need to create buckets.
 
->![](/images/icon-note.gif) **NOTE:**   
->On OBS Console, an account can have 100 buckets.  
+>![](public_sys-resources/icon-note.gif) **NOTE:** 
+>On OBS Console, an account can have 100 buckets. There is no such upper limit if you use the API or other methods to create buckets. However, these buckets also take up the bucket quota on OBS Console.
 
 ## Procedure<a name="s74adf863725c43719b19e47e5011b4f8"></a>
 
@@ -49,10 +49,10 @@ Buckets are containers that store objects in OBS. Before you store data in OBS,
     </tbody>
     </table>
 
-    >![](/images/icon-note.gif) **NOTE:**   
-    >-   When a URL is used to access a bucket, the bucket name will become a part of the URL. According to the DNS rule, URLs do not support uppercase letters and cannot be used to access a bucket whose name contains uppercase letters. Therefore, a bucket name can contain only lowercase letters, digits, hyphens \(-\), and periods \(.\) For example, if you attempt to access bucket  **MyBucket**  using the URL, bucket  **mybucket**  will be accessed instead, causing an access error.  
-    >-   DNS naming can standardize the bucket naming globally, facilitating the resolution when accessing a bucket. Users can benefit from new functions and optimized features, and static website hosting is then applicable to buckets.  
-    >-   Once you create a bucket, you cannot change the name of it. Make sure that the bucket name you set is appropriate.  
+    >![](public_sys-resources/icon-note.gif) **NOTE:** 
+    >-   When a URL is used to access a bucket, the bucket name will become a part of the URL. According to the DNS rule, URLs do not support uppercase letters and cannot be used to access a bucket whose name contains uppercase letters. Therefore, a bucket name can contain only lowercase letters, digits, hyphens \(-\), and periods \(.\) For example, if you attempt to access bucket  **MyBucket**  using the URL, bucket  **mybucket**  will be accessed instead, causing an access error.
+    >-   DNS naming can standardize the bucket naming globally, facilitating the resolution when accessing a bucket. Users can benefit from new functions and optimized features, and static website hosting is then applicable to buckets.
+    >-   Once you create a bucket, you cannot change the name of it. Make sure that the bucket name you set is appropriate.
 
 4.  Click  **OK**.
 5.  In the displayed dialog box, click  **Close**  to close the dialog box.
@@ -87,9 +87,9 @@ You can specify its storage class when creating a bucket or change its storage c
 2.  Select a bucket from the bucket list and click  ![](figures/icon-write.png)  on the right. The  **Change Storage Class**  dialog box is displayed.
 3.  Select the desired storage class and click  **OK**.
 
-    >![](/images/icon-note.gif) **NOTE:**   
-    >-   Changing the storage class of a bucket does not change the storage class of existing objects in the bucket.  
-    >-   When uploading an object, you can select a storage class for the object, which is the same as the bucket storage class by default. If the bucket storage class changes, the default object storage class changes accordingly.  
+    >![](public_sys-resources/icon-note.gif) **NOTE:** 
+    >-   Changing the storage class of a bucket does not change the storage class of existing objects in the bucket.
+    >-   An object inherits the bucket storage class by default, if no other storage class is specified for the object upon its upload. When the bucket storage class is changed, newly uploaded objects inherit the new bucket storage class by default.
 
 4.  In the displayed dialog box, click  **Close**  to close the dialog box.
 
@@ -8,9 +8,9 @@ You have obtained the permissions to read and write the external bucket that you
 
 For example: Account  **A**  wants to add bucket  **testbucket**  of account  **B**. Account  **B**  must authorize account  **A**  the permission to read bucket  **testbucket**. If account  **A**  needs to upload object to bucket  **testbucket**, account  **B**  needs to authorize account  **A**  the permission to write the bucket. Account  **A**  is the owner of the uploaded objects, and needs to authorize account  **B**  the permission to read and write the objects.
 
->![](/images/icon-note.gif) **NOTE:**   
->An external bucket \(version 3.0 or later\) can be added only when its standard bucket policy is set to  **Public Read and Write**.  
->If the standard bucket policy of an external bucket is set to  **Public Read and Write**  upon its creation, you need to manually change the standard bucket policy to  **Private**  and then change it back to  **Public Read and Write**  again, so that it can be added.  
+>![](public_sys-resources/icon-note.gif) **NOTE:** 
+>An external bucket \(version 3.0 or later\) can be added only when its standard bucket policy is set to  **Public Read and Write**.
+>If the standard bucket policy of an external bucket is set to  **Public Read and Write**  upon its creation, you need to manually change the standard bucket policy to  **Private**  and then change it back to  **Public Read and Write**  again, so that it can be added.
 
 ## Procedure<a name="sed02728ed0884d3a93f42523c801b294"></a>
 

@@ -43,14 +43,14 @@ A bucket ACL can be used to grant the read and write access to a bucket. If only
 ## Procedure<a name="section207491196166"></a>
 
 1.  Log in to OBS Console.
-2.  In the bucket list, click the bucket to be operated. The  **Summary**  page of the bucket is displayed.
+2.  In the bucket list, click the bucket to be operated. The  **Overview**  page of the bucket is displayed.
 3.  In the navigation pane on the left, click  **Permissions**  to go to the permission management page.
 4.  Click  **Bucket ACL**. The  **Bucket ACL**  page is displayed.
 5.  Click  **Add**, enter the account ID of the user that will add the bucket to OBS Browser, and select the read and write access to the bucket.
 
-    >![](/images/icon-note.gif) **NOTE:**   
-    >If you want to authorize such access to all users, in the  **Public Permissions**  area, authorize the  **Anonymous User**  the read and write access to the bucket.  
-    >**Account ID**  corresponds to  **Domain ID**  on the  **My Credential**  page.  
+    >![](public_sys-resources/icon-note.gif) **NOTE:** 
+    >If you want to authorize such access to all users, in the  **Public Permissions**  area, authorize the  **Anonymous User**  the read and write access to the bucket.
+    >**Account ID**  corresponds to  **Domain ID**  on the  **My Credential**  page.
 
 6.  Click  **Save**.
 

@@ -65,12 +65,12 @@ If a custom bucket policy is used to authorize such permissions, the ListBucket,
     </thead>
     <tbody><tr id="row811513258484"><td class="cellrowborder" valign="top" width="27.47%" headers="mcps1.2.3.1.1 "><p id="p9115142594814"><a name="p9115142594814"></a><a name="p9115142594814"></a>Policy Mode</p>
     </td>
-    <td class="cellrowborder" valign="top" width="72.53%" headers="mcps1.2.3.1.2 "><p id="p1611542518488"><a name="p1611542518488"></a><a name="p1611542518488"></a><strong id="b499032606"><a name="b499032606"></a><a name="b499032606"></a>Customized</strong></p>
+    <td class="cellrowborder" valign="top" width="72.53%" headers="mcps1.2.3.1.2 "><p id="p1611542518488"><a name="p1611542518488"></a><a name="p1611542518488"></a><strong id="b696771877"><a name="b696771877"></a><a name="b696771877"></a>Customized</strong></p>
     </td>
     </tr>
     <tr id="row1711512514810"><td class="cellrowborder" valign="top" width="27.47%" headers="mcps1.2.3.1.1 "><p id="p511511252487"><a name="p511511252487"></a><a name="p511511252487"></a>Effect</p>
     </td>
-    <td class="cellrowborder" valign="top" width="72.53%" headers="mcps1.2.3.1.2 "><p id="p711532510482"><a name="p711532510482"></a><a name="p711532510482"></a><strong id="b18671210"><a name="b18671210"></a><a name="b18671210"></a>Allow</strong></p>
+    <td class="cellrowborder" valign="top" width="72.53%" headers="mcps1.2.3.1.2 "><p id="p711532510482"><a name="p711532510482"></a><a name="p711532510482"></a><strong id="b295478701"><a name="b295478701"></a><a name="b295478701"></a>Allow</strong></p>
     </td>
     </tr>
     <tr id="row1115122518484"><td class="cellrowborder" valign="top" width="27.47%" headers="mcps1.2.3.1.1 "><p id="p1011552504817"><a name="p1011552504817"></a><a name="p1011552504817"></a><strong id="b7578192115249"><a name="b7578192115249"></a><a name="b7578192115249"></a>Principal</strong></p>
@@ -80,12 +80,12 @@ If a custom bucket policy is used to authorize such permissions, the ListBucket,
     </tr>
     <tr id="row1811522524818"><td class="cellrowborder" valign="top" width="27.47%" headers="mcps1.2.3.1.1 "><p id="p31151725114811"><a name="p31151725114811"></a><a name="p31151725114811"></a><strong id="b9181154132420"><a name="b9181154132420"></a><a name="b9181154132420"></a>Resources</strong></p>
     </td>
-    <td class="cellrowborder" valign="top" width="72.53%" headers="mcps1.2.3.1.2 "><a name="ul71161425124816"></a><a name="ul71161425124816"></a><ul id="ul71161425124816"><li><strong id="b154901871"><a name="b154901871"></a><a name="b154901871"></a>Include</strong></li><li>Resource name: <strong id="b1360682014254"><a name="b1360682014254"></a><a name="b1360682014254"></a>*</strong></li></ul>
+    <td class="cellrowborder" valign="top" width="72.53%" headers="mcps1.2.3.1.2 "><a name="ul71161425124816"></a><a name="ul71161425124816"></a><ul id="ul71161425124816"><li><strong id="b2059891046"><a name="b2059891046"></a><a name="b2059891046"></a>Include</strong></li><li>Resource name: <strong id="b1360682014254"><a name="b1360682014254"></a><a name="b1360682014254"></a>*</strong></li></ul>
     </td>
     </tr>
     <tr id="row1111672520488"><td class="cellrowborder" valign="top" width="27.47%" headers="mcps1.2.3.1.1 "><p id="p1411622544813"><a name="p1411622544813"></a><a name="p1411622544813"></a><strong id="b13145211172519"><a name="b13145211172519"></a><a name="b13145211172519"></a>Actions</strong></p>
     </td>
-    <td class="cellrowborder" valign="top" width="72.53%" headers="mcps1.2.3.1.2 "><a name="ul16116225174814"></a><a name="ul16116225174814"></a><ul id="ul16116225174814"><li><strong id="b908756726"><a name="b908756726"></a><a name="b908756726"></a>Include</strong></li><li>GetObject</li><li>GetObjectVersion</li><li>PutObject</li><li>DeleteObject</li><li>DeleteObjectVersion</li></ul>
+    <td class="cellrowborder" valign="top" width="72.53%" headers="mcps1.2.3.1.2 "><a name="ul16116225174814"></a><a name="ul16116225174814"></a><ul id="ul16116225174814"><li><strong id="b2050635767"><a name="b2050635767"></a><a name="b2050635767"></a>Include</strong></li><li>GetObject</li><li>GetObjectVersion</li><li>PutObject</li><li>DeleteObject</li><li>DeleteObjectVersion</li></ul>
     </td>
     </tr>
     </tbody>