【Upgrade】Notice on Downloading APK or IPA Objects by Using the Default Domain or OSS-Accelerated Domains of A Bucket and Redirection Rule Changes
Jul 03, 2024
Object Storage Service
To continuously improve the security and compliance management of Alibaba Cloud Object Storage Service (OSS), the following service adjustments will be implemented starting from 00:00:00 (UTC+8) on August 5, 2024. Read the following details carefully and modify your application configurations to ensure business continuity.
Details:
1. Optimized access control for APK/IPA objects
● If you use the default domain name of a bucket that is created on or after 00:00:00 (UTC+8) on August 5, 2024 to access APK or IPA objects in the bucket anonymously or by using a signed URL, the request is blocked, and the ApkDownloadForbidden error code and HTTP status code 400 are returned. The default domain name of a bucket is in the bucketname.oss-cn-region.aliyuncs.com format. The MIME type is application/vnd.android.package-archive for APK objects and application/iphone for IPA objects.
● Starting from 00:00:00 (UTC+8) on August 5, 2024, if you enable the transfer acceleration feature for a bucket and try to access APK or IPA objects in the bucket by using the OSS-accelerated domain names (bucketname.oss-accelerate.aliyuncs.com or bucketname.oss-accelerate-overseas.aliyuncs.com), the request is blocked, and the ApkDownloadForbidden error code is returned.
2. Redirection rule changes
● If you use the default domain name of a bucket created on or after 00:00:00 (UTC+8) on August 5, 2024 to access a non-existent object in the bucket anonymously or by using a signed URL and a preset redirection (an HTTP status code 3xx for redirection) rule is triggered, the redirection request is blocked, and the ExternalRedirectForbidden error code and HTTP status code 400 are returned.
● If you use OSS-accelerated domain names to access a bucket for which transfer acceleration is enabled on or after 00:00:00 (UTC+8) on August 5, 2024 and a preset redirection (an HTTP status code 3xx for redirection) rule is triggered, the redirection request is blocked.
Suggestion:
● If you want to continue downloading APK/IPA objects or redirect the request, use a custom domain name. For more information, see https://www.alibabacloud.com/help/en/oss/user-guide/map-custom-domain-names-5.
The preceding changes may affect your workflow. If you have questions or need technical assistance or further instructions, contact us by submitting a ticket or calling the customer hotline. Thank you for your understanding and cooperation!
Details:
1. Optimized access control for APK/IPA objects
● If you use the default domain name of a bucket that is created on or after 00:00:00 (UTC+8) on August 5, 2024 to access APK or IPA objects in the bucket anonymously or by using a signed URL, the request is blocked, and the ApkDownloadForbidden error code and HTTP status code 400 are returned. The default domain name of a bucket is in the bucketname.oss-cn-region.aliyuncs.com format. The MIME type is application/vnd.android.package-archive for APK objects and application/iphone for IPA objects.
● Starting from 00:00:00 (UTC+8) on August 5, 2024, if you enable the transfer acceleration feature for a bucket and try to access APK or IPA objects in the bucket by using the OSS-accelerated domain names (bucketname.oss-accelerate.aliyuncs.com or bucketname.oss-accelerate-overseas.aliyuncs.com), the request is blocked, and the ApkDownloadForbidden error code is returned.
2. Redirection rule changes
● If you use the default domain name of a bucket created on or after 00:00:00 (UTC+8) on August 5, 2024 to access a non-existent object in the bucket anonymously or by using a signed URL and a preset redirection (an HTTP status code 3xx for redirection) rule is triggered, the redirection request is blocked, and the ExternalRedirectForbidden error code and HTTP status code 400 are returned.
● If you use OSS-accelerated domain names to access a bucket for which transfer acceleration is enabled on or after 00:00:00 (UTC+8) on August 5, 2024 and a preset redirection (an HTTP status code 3xx for redirection) rule is triggered, the redirection request is blocked.
Suggestion:
● If you want to continue downloading APK/IPA objects or redirect the request, use a custom domain name. For more information, see https://www.alibabacloud.com/help/en/oss/user-guide/map-custom-domain-names-5.
The preceding changes may affect your workflow. If you have questions or need technical assistance or further instructions, contact us by submitting a ticket or calling the customer hotline. Thank you for your understanding and cooperation!
