Object Storage Service:How do I allow only CDN-accelerated domain names to access OSS resources?

Overview

This topic describes how to allow only specific CDN-accelerated domain names to access Object Storage Service (OSS) resources without a signature. Signatures are required if you access OSS resources by using other methods.

Procedure

To allow only specific accelerated domain names to access OSS resources, perform the following steps:

1. Log on to the OSS console. Find the bucket that you want to manage and set the Access Control List (ACL) of the bucket to Private. For more information, see Modify the ACL of a bucket.

2. Use Alibaba Cloud CDN to accelerate the delivery of resources in the bucket. For more information, see Use CDN to accelerate access to OSS.

3. Log on to the Alibaba Cloud CDN console and enable access to the private OSS bucket for the accelerated domain name. For more information, see Grant Alibaba Cloud CDN access permissions on private OSS buckets.

Applicable scope

• OSS

• CDN