Docs: Buckets

Mon, 01 Jan 0001 00:00:00 +0000

Object storage is a distributed storage service for storing arbitrary files. A bucket stores object files. Users must create a bucket before storing files. The cloud management platform allocates object storage resources to projects in bucket units. Users can conveniently upload, download, and share files in object storage over the network.

The cloud management platform currently supports integrating and importing S3-protocol object storage services such as MinIO and Ceph Radio, as well as object storage services provided by public clouds.

Usage flow:

(Choose one) In multi-cloud management, integrate and import public cloud account resources with object storage enabled, and sync buckets from the public cloud platform;
(Choose one) In multi-cloud management, integrate and import account resources of a locally deployed object storage server;
Create a bucket and assign it to a project.
Users in the project can upload, download, and share files in the bucket.

Entry: On the cloud management platform, click the navigation menu in the upper left corner, then click “Resource Management/Storage/Object Storage/Buckets” in the left sidebar to open the Buckets page.

Create a bucket

This feature creates a bucket.

Note

On the create bucket page, click the “On-premises IDC” or “Public cloud” tab at the top to switch between creating buckets on different platforms.

Create an on-premises IDC bucket

Before creating an on-premises IDC bucket, ensure you have an object storage S3/Ceph/XSKY cloud account.

On the Buckets page, click the “All” or “On-premises IDC” tab at the top, then click “Create” above the list, and the create bucket dialog box appears.
Configure the following parameters:
- Specify project: Administrators and domain administrators must specify the project that the bucket belongs to when creating it.
- Region: Select the region of the bucket.
- Name: Set the bucket name. Bucket names are globally unique. Avoid common names such as test to prevent creation failure.
- Specify cloud subscription: Specify the cloud subscription used to create the bucket.
Click “OK” to create the bucket.

Create a public cloud bucket

Before creating a public cloud elastic IP, ensure you have a cloud account for the corresponding platform.

Note

Currently only creating buckets in Alibaba Finance Cloud public network regions is supported.

On the Buckets page, click the “Public cloud” tab at the top, then click “Create” above the list, and the create bucket dialog box appears.
Set the following parameters:
- Specify project: Administrators and domain administrators must specify the project that the bucket belongs to when creating it.
- Region: Select the region of the elastic IP. You can quickly filter suitable regions by city or platform.
- Name: Set the bucket name.
- Specify cloud subscription: Specify the cloud subscription used to create the bucket.
Click “OK” to create the bucket.

Sync status

This feature retrieves the current status of a bucket.

Sync status for one

On the Buckets page, click “Sync status” in the Actions column of the bucket to sync the bucket status.

Sync status for multiple

In the bucket list, select one or more buckets, click “Batch actions”, then select “Sync status” to sync bucket status in batch.

Set limits

This feature sets the capacity and object count limits for files stored in a bucket.

On the Buckets page, based on the number of buckets for which you want to set limits, choose how to set limits.
- Set limits for one bucket: Click “More” in the Actions column of the bucket, select “Set limits”, and the set limits dialog box appears.
- Set limits for multiple buckets: In the bucket list, select one or more buckets, click “Batch actions”, select “Set limits”, and the set limits dialog box appears.
Set the capacity limit and object limit for the bucket (0 means unlimited), then click “OK”.

This feature sets the sharing scope of storage.

Project resources have five sharing scopes:

Not shared (private): Only users in the project can use the project resource.
Project sharing - partial (shared across multiple projects in this domain): The project resource can be shared with specified projects (one or more) in the same domain. Only users in this project and the shared projects can use the project resource.
Project sharing - all (shared within this domain): The project resource can be shared with all projects in the domain. Users in the domain of the project can use the project resource.
Domain sharing - partial (shared across multiple domains): The project resource can be shared with specified domains (one or more). Only users in the domain of the project resource and the shared domains can use the project resource.
Domain sharing - all (global sharing): The project resource can be shared with all domains. All users in the system can use the project resource.

Note

Conditions for setting domain sharing:

Three-level permissions are enabled on the OneCloud platform.
The user is in the admin console.

Conditions for setting project sharing:

The user is in the admin console or domain admin console.

Caution

The sharing scope of a bucket is related to the sharing scope of the cloud account.
- When the cloud account is not shared, resources synced from the cloud account also cannot be shared.
- When the cloud account has sharing enabled, resources synced from the cloud account also have sharing enabled with the cloud account.
- When the cloud account has sharing enabled, resources synced from the cloud account can change their sharing scope. Ensure the sharing scope is within the cloud account’s sharing scope.
- When the cloud account’s sharing scope is modified, the sharing scope of resources synced from the cloud account must always remain within the cloud account’s sharing scope. For example, if the cloud account shares domains A, B, C, and D, and a domain resource shares domains A and C, and the cloud account’s sharing scope is changed to A and B, the domain resource can only share domain A.
- When the cloud account shares cloud subscriptions, domain resources synced from the cloud account cannot be shared.

Set sharing for one bucket

On the Buckets page, click “More” in the Actions column of the bucket, select “Set sharing” from the drop-down menu, and the set sharing dialog box appears.
Configure the following parameters.
- When the sharing scope is “Not shared”, the project resource is private and only users in this project can use it.
- When the sharing scope is “Project sharing”, select the projects in this domain that can share it.
  - When one or more projects in the same domain are selected, the sharing scope is Project sharing - partial. Only users in the project of the resource and the shared projects can use the project resource.
  - When all projects are selected, the sharing scope is Project sharing - all. Users in the domain of the project can use the project resource.
- When the sharing scope is “Domain sharing”, select the domains to share with.
  - When one or more domains are selected, the sharing scope is Domain sharing - partial. Only users in the domain of the project resource and the shared domains can use the domain resource.
  - When all domains are selected, the sharing scope is Domain sharing - all. All users in the system can use the project resource.
Click “OK” to complete the operation.

Set sharing in batch

When setting sharing for multiple buckets in batch, the sharing scope must be the same. Otherwise, set sharing for each bucket separately.

In the bucket list, select one or more buckets, click “Batch actions” above the list, select “Set sharing” from the drop-down menu, and the set sharing dialog box appears.
Configure the following parameters.
- When the sharing scope is “Not shared”, the project resource is private and only users in this project can use it.
- When the sharing scope is “Project sharing”, select the projects in this domain that can share it.
  - When one or more projects in the same domain are selected, the sharing scope is Project sharing - partial. Only users in the project of the resource and the shared projects can use the project resource.
  - When all projects are selected, the sharing scope is Project sharing - all. Users in the domain of the project can use the project resource.
- When the sharing scope is “Domain sharing”, select the domains to share with.
  - When one or more domains are selected, the sharing scope is Domain sharing - partial. Only users in the domain of the project resource and the shared domains can use the domain resource.
  - When all domains are selected, the sharing scope is Domain sharing - all. All users in the system can use the project resource.
Click “OK” to complete the operation.

Set read/write permissions

This feature sets the read/write permissions of a bucket.

Note

Tencent Cloud buckets do not support public read/write;
Azure buckets do not support authenticated-user read or public read/write;
AWS buckets do not support authenticated-user read, this-account write with public read, or public read/write;
Alibaba Cloud and Ceph buckets do not support authenticated-user read;
Buckets in Alibaba Finance Cloud private network regions do not support setting read/write permissions.

On the Buckets page, click “More” in the Actions column of the bucket, select “Set read/write permissions”, and the set access permissions dialog box appears.
Set read/write permissions: Includes this-account read/write, this-account public read, and public read/write.
- This-account read/write: Only the user can read and write data in the specified bucket.
- Authenticated-user read: Authenticated users can read data in the bucket; only the user can perform write operations.
- This-account write with public read: Any user can read data in the bucket, but writing data to the bucket requires authentication.
- Public read/write: Any user can read and write data in the bucket without authentication. This permission has extremely high security risk. To protect your data, select it with caution.
Click “OK” to complete the operation.

Change project

This feature changes the project that a bucket belongs to. Only users in the project can use the bucket to store files.

Change project for one bucket

On the Buckets page, click “More” in the Actions column of the bucket, select “Change project” from the drop-down menu, and the change project dialog box appears.
Select the domain and project, then click “OK” to complete the operation.

Change project in batch

In the bucket list, select one or more buckets, click “Batch actions”, select “Change project”, and the change project dialog box appears.
Select the domain and project, then click “OK” to complete the operation.

Delete a bucket

This feature deletes a bucket. A bucket can be deleted only when it contains no files.

Note

Buckets in Alibaba Finance Cloud private network regions do not support setting read/write permissions.

Delete one

On the Buckets page, click “More” in the Actions column of the bucket, select “Delete”, and an operation confirmation dialog box appears.
Click “OK” to complete the operation.

Delete multiple

In the bucket list, select one or more buckets, click “Batch actions”, select “Delete”, and an operation confirmation dialog box appears.
Click “OK” to complete the operation.

View bucket details

This feature views detailed information about a bucket.

On the Buckets page, click the bucket name to open the file list page.
Click the “Details” tab to open the bucket details page.
View the following information
- Basic information: Includes the bucket’s cloud ID, ID, name, status, domain, project, sharing scope, platform, region, location (used to check whether an Alibaba Finance Cloud bucket is in a private network region), storage type, availability zone, cloud account, creation time, update time, notes, and more.
- Access domain: After a bucket is created, the corresponding access domain and S3 gateway are generated. Users can manage buckets uniformly through the S3 gateway.
- CDN acceleration domain: Displays the CDN acceleration domain set for the bucket.
- Static website: Displays the access link and related information for the bucket static website.
- Usage statistics: Statistics on capacity used by the bucket, including storage usage and file count.
- Usage limits: Capacity limits set for the bucket, including storage capacity limit and file count limit.
- Access permissions: Set the bucket access permissions, including this-account read/write, this-account public read, and public read/write. This-account information can be obtained from the bucket backend access information.
  - This-account read/write: Only the user can read and write data in the specified bucket.
  - Authenticated-user read: Authenticated users can read data in the bucket; only the user can perform write operations.
  - This-account public read: Any user can read data in the bucket, but writing data to the bucket requires authentication.
  - Public read/write: Any user can read and write data in the bucket without authentication. This permission has extremely high security risk. To protect your data, select it with caution.
- Hotlink protection: Displays whether hotlink protection is set for the bucket.

Set static website

Object storage supports hosting static websites on a bucket. Users need to upload static website configuration files to the bucket, set file access permissions, and use Set static website to configure the index page, error page, and related information. After configuration, users can access the static website through the access domain. On success, they are redirected to the index page; on error, they are redirected to the error page.

A static website consists entirely of static content, including client-side scripts such as JavaScript. Object storage does not support content that requires server-side processing, such as PHP, JSP, or ASP.NET.

Note

Currently supported on Tencent Cloud only.

On the Buckets page, click the bucket name to open the file list page.
Click the “Details” tab to open the bucket details page.
In the Static website section, click “Set static website” to the right of the access address, and the set static website dialog box appears.
Configure the following parameters:
- Status: Select whether to enable static website hosting. The following parameters can be configured only after it is enabled.
- Index document: The index document is the home page of the static website. When users access the static website, this page is accessed by default. In most cases, the index document is index.html.
- Error document: When users encounter an error accessing the static website, a 404 error code and the specified error document information are returned. In most cases, the error document is error.html.

Set hotlink protection

To prevent data in a bucket from being hotlinked and causing unnecessary losses, object storage supports hotlink protection.

The HTTP protocol supports obtaining the source page of the target page through the Referer header field. Hotlink protection checks whether the Referer field in the request matches the configured whitelist or blacklist. If it matches the whitelist, access is allowed; otherwise, access is blocked.

Note

Currently supported on Tencent Cloud only.
If a request to a Tencent Cloud bucket includes a signature (whether in the URL or Header), hotlink protection verification is not performed.

On the Buckets page, click the bucket name to open the file list page.
Click the “Details” tab to open the bucket details page.
In the Hotlink protection section, click “Set”, and the set hotlink protection dialog box appears.
Configure the following parameters:
- Empty Referer: Whether to allow HTTP or HTTPS requests whose header includes an empty Referer (no Referer field or an empty Referer field) to access object storage resources.
- Whitelist Referer: Allow domains in the whitelist to access the default access address of the bucket.
Click “OK”,

File management

This feature manages files and folders.

Caution

Files in buckets under AWS China cloud accounts on the cloud management platform cannot be downloaded through the UI or URL sharing, regardless of the permissions set.
Buckets in Alibaba Finance Cloud private network regions do not support file management and related operations.

Upload files

This feature uploads files to a specified bucket. Up to 4 files can be uploaded at the same time. Note that files with the same name overwrite previously uploaded files.

Caution

After importing Azure cloud account resources, Azure buckets do not support uploading files in the root directory. Upload files in folders under the root directory.

On the Buckets page, click the bucket name to open the file list page.
Click “Upload files” above the list, and the upload files dialog box appears.
Drag files directly into the dashed box or click the “Upload directly” hyperlink to select files, then click “OK” to upload the files.

Download files

This feature lets users download files to the local machine.

On the Buckets page, click the bucket name to open the file list page.
Click “Download” in the Actions column of the file. The browser downloads or opens the file.
If the browser supports opening the downloaded file format, it opens the file instead of downloading it. Save the file as a local file from the browser.
If the browser does not support opening the downloaded file format, it downloads the file directly.

Delete files

Supports deleting one or multiple files.

Delete one

On the Buckets page, click the bucket name to open the file list page.
Click “Delete” in the Actions column of the file, and an operation confirmation dialog box appears.
Click “OK” to complete the operation.

Delete multiple

In the file list, select one or more files (or folders), click “Delete”, and an operation confirmation dialog box appears.
Click “OK” to complete the operation.

Generate URL

This feature generates a temporary URL for a file for sharing.

On the Buckets page, click the bucket name to open the file list page.
Click “More” in the Actions column of the file, select “Generate URL”, and the generate URL dialog box appears.
Set the connection validity period (other users can access the file via the URL within the validity period) to generate a temporary URL. Click “Copy file URL” to copy the file URL to the clipboard so users can paste and share it.
Click “Close” to close the dialog box.

Set read/write permissions

This feature sets the read/write permissions of a file (or folder). If not set, the file’s read/write permissions default to the same as the bucket.

Caution

Files in Azure buckets do not support setting read/write permissions. File read/write permissions are the same as the bucket.

Set read/write permissions for one file

On the Buckets page, click the bucket name to open the file list page.
Click “More” in the Actions column of the file, select “Set read/write permissions”, and the set access permissions dialog box appears.
Set read/write permissions: Includes this-account read/write, this-account public read, and public read/write.
- This-account read/write: Only the user can read and write data in the specified bucket.
- This-account public read: Any user can read data in the bucket, but writing data to the bucket requires authentication.
- Public read/write: Any user can read and write data in the bucket without authentication. This permission has extremely high security risk. To protect your data, select it with caution.
Click “OK” to complete the operation.

Set read/write permissions in batch

Note

When you set read/write permissions for a folder in a bucket, files in the folder inherit the folder permissions.

On the Buckets page, click the bucket name to open the file list page.
In the file list, select one or more files (or folders), click “More” above the list, select “Set read/write permissions”, and the set access permissions dialog box appears.
Set read/write permissions: Includes this-account read/write, this-account public read, and public read/write.
- This-account read/write: Only the user can read and write data in the specified bucket.
- This-account public read: Any user can read data in the bucket, but writing data to the bucket requires authentication.
- Public read/write: Any user can read and write data in the bucket without authentication. This permission has extremely high security risk. To protect your data, select it with caution.
Click “OK” to complete the operation.

Set HTTP headers

This feature sets the HTTP headers of a file. If the HTTP header encoding does not match the file’s own encoding, the file may display garbled characters when opened in a browser. Users can change the default HTTP header encoding with this feature.

Set HTTP headers for one file

On the Buckets page, click the bucket name to open the file list page.
Click “More” in the Actions column of the file, select “Set HTTP headers”, and the set HTTP headers dialog box appears.
Set the following parameters:
- Content-Type: File type, such as image/png, “text/html; charset=UTF-8”, and so on.
- Content-Encoding: Encoding method, such as gzip, compress, identity, and so on.
- Content-Language: Language, such as de-DE, en-CA, and so on.
- Content-Disposition: Content presentation method. inline means the content can be displayed in the browser together with the page (such as images); attachment means the content is for download.
- Cache-Control: Cache control, such as no-cache, no-store, and so on.
Click “OK” to complete the operation.

Set HTTP headers in batch

On the Buckets page, click the bucket name to open the file list page.
In the file list, select one or more files, click “More” above the list, select “Set HTTP headers”, and the set HTTP headers dialog box appears.
Set the following parameters:
- Content-Type: File type, such as image/png, “text/html; charset=UTF-8”, and so on.
- Content-Encoding: Encoding method, such as gzip, compress, identity, and so on.
- Content-Language: Language, such as de-DE, en-CA, and so on.
- Content-Disposition: Content presentation method. inline means the content can be displayed in the browser together with the page (such as images); attachment means the content is for download.
- Cache-Control: Cache control, such as no-cache, no-store, and so on.
Click “OK” to complete the operation.

Folder management

Folders are mainly used to manage and categorize files. Folders support all file operations such as upload, download, and sharing. Folders support nesting, that is, creating folders inside folders.

Create a folder

This feature creates a folder for managing files.

On the Buckets page, click the bucket name to open the file list page.
Click “Create folder” above the list, and the create folder dialog box appears.
Set the folder name, then click “OK”.

Delete a folder

This feature deletes a folder. Supports deleting one or multiple folders.

Delete one

On the Buckets page, click the bucket name to open the file list page.
Click “Delete” in the Actions column of the folder, and an operation confirmation dialog box appears.
Click “OK” to complete the operation.

Delete multiple

On the Buckets page, click the bucket name to open the file list page.
In the file list, select one or more folders, click “Delete”, and an operation confirmation dialog box appears.
Click “OK” to complete the operation.

CORS rules

In typical web requests, the same-origin policy restricts interaction between different origins (same protocol, same domain name or IP, and same port are considered one origin). Cross-Origin Resource Sharing (CORS) adds the Origin field in HTTP headers to allow servers to declare which origins are permitted by the browser to access which resources, enabling resource interaction across origins.

Create a CORS rule

This feature creates a CORS access rule.

On the Buckets page, click the bucket name to open the file list page.
Click the “CORS” tab to open the CORS page.
Click “Create”, and the create CORS rule dialog box appears.
Configure the following parameters:
- Origin: Origins allowed for cross-origin requests. Multiple origins can be specified; enter one per line.
- Allowed methods: Supports GET, PUT, POST, DELETE, and HEAD.
- Allowed headers: Which custom request headers are allowed for access.
- Exposed headers: Extra headers in the CORS response that provide additional information to the client.
- Cache time: Validity period of the request result.
Click “OK” to complete the operation.

Modify a CORS rule

This feature modifies a CORS access rule.

On the Buckets page, click the bucket name to open the file list page.
Click the “CORS” tab to open the CORS page.
Click “Modify” in the Actions column of the CORS rule, and the modify CORS rule dialog box appears.
You can modify the following parameters:
- Origin: Origins allowed for cross-origin requests. Multiple origins can be specified; enter one per line.
- Allowed methods: Supports GET, PUT, POST, DELETE, and HEAD.
- Allowed headers: Which custom request headers are allowed for access.
- Exposed headers: Extra headers in the CORS response that provide additional information to the client.
- Cache time: Validity period of the request result.
Click “OK” to complete the operation.

Delete a CORS rule

This feature deletes a CORS access rule.

Delete one

On the Buckets page, click the bucket name to open the file list page.
Click the “CORS” tab to open the CORS page.
Click “Delete” in the Actions column of the CORS rule, and an operation confirmation dialog box appears.
Click “OK” to complete the operation.

Delete multiple

On the Buckets page, click the bucket name to open the file list page.
Click the “CORS” tab to open the CORS page.
In the list, select one or more CORS rules, click “Delete” above the list, and an operation confirmation dialog box appears.
Click “OK” to complete the operation.

Authorization policies

This feature controls permissions for public cloud root accounts and sub-accounts to access buckets and objects.

Create an authorization policy

This feature creates an authorization policy. An authorization policy defines the specified operation permissions of a specified user on a specified resource.

On the Buckets page, click the bucket name to open the file list page.
Click the “Authorization policies” tab to open the authorization policies page.
Click “Create”, and the create authorization policy dialog box appears.
Configure the following parameters:
- Policy effect: Currently only Allow is supported.
- User: Users allowed to access resources in the authorization policy. Currently supports setting the root account and sub-accounts of the current account. When setting the root account, enter the corresponding root account ID.
- Resource: Resources the user can access. Can be set to the entire bucket or specified resources under the bucket.
- Resource path: When the resource is “Entire bucket”, the resource path cannot be set. When the resource is “Specified resources”, set the specific resource paths. Multiple resource paths can be set.
- Actions: Set the user’s operation permissions on the resource, including read-only, read/write, full control, and more.
Click “OK” to complete the operation

Delete an authorization policy

This feature deletes an authorization policy.

Delete one

On the Buckets page, click the bucket name to open the file list page.
Click the “Authorization policies” tab to open the authorization policies page.
Click “Delete” in the Actions column of the authorization policy, and an operation confirmation dialog box appears.
Click “OK” to complete the operation

Delete multiple

On the Buckets page, click the bucket name to open the file list page.
Click the “Authorization policies” tab to open the authorization policies page.
In the list, select one or more authorization policies, click “Delete” above the list, and an operation confirmation dialog box appears.
Click “OK” to complete the operation

View bucket monitoring

This feature views monitoring information for a bucket. Currently only Alibaba Cloud and Huawei Cloud bucket monitoring is supported.

On the Buckets page, click the bucket name to open the file list page.
Click the “Monitoring” tab to open the monitoring page.
View the number of GET requests for the bucket and the average first-byte latency of GET requests.

View bucket operation logs

This feature views log information for operations performed on a bucket.

On the Buckets page, click the bucket name to open the file list page.
Click the “Operation Logs” tab to open the operation logs page.
- Load more logs: The list displays 20 operation log entries by default. To view more, click “Load more” to retrieve more log information.
- View log details: Click “View” in the Actions column of the operation log to view log details. You can copy the detail content.
- View logs for a specific time range: To view operation logs for a time range, set the start and end dates in the upper right of the list to query logs for that range.
- Export logs: Currently only logs displayed on the current page can be exported. Click the icon in the upper right, set the export data columns in the export data dialog box, then click “OK” to export the logs.

View bucket multi-level organization structure

This feature filters and displays bucket resources across multiple levels using project tags.

On the Buckets page, click the icon to the left of the search box to expand hierarchical projects.
Click the settings icon in the upper right to open the configure hierarchy page.
Click “Add level” to add multiple levels. After selecting a project tag for each level, click “OK”.
For how to create project tags, see Projects.

How to manage files in a bucket through the S3 gateway?

The S3 gateway (S3gateway) is a unified object storage gateway that provides standard S3 APIs. The gateway backend connects to object storage on the cloud management platform. Users can access the S3 gateway through standard S3 clients and SDKs for unified access to multi-cloud object storage.

Obtain the S3 gateway address of the bucket.

In the OneCloud console, on the details page of the specified bucket, find the URL that describes s3gateway under Access domain. The host address of that URL is the S3 gateway access address.
Create an AccessKey/AccessKey Secret in the OneCloud console.
1. In the personal information area of the OneCloud console, click the icon in the upper right, select “Access credentials” from the drop-down menu, and open the AccessKey management page.
2. Click “Create” above the list to create an AccessKey and AccessKey Secret. View and copy the AccessKey and AccessKey Secret information. You can save the AccessKey locally.
Enter the gateway address and AccessKey ID and AccessKey Secret in the standard S3 client Cyberduck.
1. First download the Cyberduck client from the official website https://cyberduck.io/ and install it.
2. After installation, open the Cyberduck client and click “Open Connection”. Configure the following parameters.
  - Select the connection type “Amazon S3”.
  - Set the server address to the S3 gateway address.
  - Set Access Key ID to the AccessKey ID.
  - Set Secret Access Key to the AccessKey Secret.
  - Click “Connect”.

Caution

Because s3gateway uses a self-signed certificate, an insecure certificate prompt appears. Select “Continue” and “Always Trust”.

 ![](/docs/en/docs/web_ui/images/storage/certificate.png)
![](/docs/en/docs/web_ui/images/storage/validcert1.png)

Manage S3 file directories through the Cyberduck client, and conveniently upload, download, move, copy, and delete files.

Cloudpods – Object Storage

Docs: Buckets

Create a bucket

Create an on-premises IDC bucket

Create a public cloud bucket

Sync status

Set limits

Set sharing

Set read/write permissions

Change project

Delete a bucket

View bucket details

Set static website

Set hotlink protection

File management

Upload files

Download files

Delete files

Generate URL

Set read/write permissions

Set HTTP headers

Folder management

Create a folder

Delete a folder

CORS rules

Create a CORS rule

Modify a CORS rule

Delete a CORS rule

Authorization policies

Create an authorization policy

Delete an authorization policy

View bucket monitoring

View bucket operation logs

View bucket multi-level organization structure

How to manage files in a bucket through the S3 gateway?