Service Upgrade

Deny requests to access APK or IPA objects by using the default public domain names or acceleration endpoints of OSS

Upgrade time: 00:00 (UTC+8) on August 15, 2023
Upgrade content: To enhance data security, the following rules will take effect for objects whose names contain the .apk or .ipa extension after 00:00 (UTC+8) on August 15, 2023:
1. If you access these objects in buckets that are created after 00:00 (UTC+8) on August 15, 2023 by using signed URLs that contain the default public domain names (example: bucketname.oss-cn-region.aliyuncs.com) or anonymously, the requests are denied. HTTP status code 400 and the ApkDownloadForbidden error code are returned.
2. If you access these objects in buckets for which the transfer acceleration feature is enabled after 00:00 (UTC+8) on August 15, 2023 by using signed URLs that contain the acceleration endpoints (example: bucketname.oss-accelerate.aliyuncs.com or bucketname.oss-accelerate-overseas.aliyuncs.com) or anonymously, the requests are denied. HTTP status code 400 and the ApkDownloadForbidden error code are returned.

If you use custom domain names to access these objects, the requests are allowed. For more information about how to use custom domain names to access OSS objects, see "Map custom domain names" (https://www.alibabacloud.com/help/en/object-storage-service/latest/map-custom-domain-names-1) in OSS User Guide.