All Products
Search
Document Center

Object Storage Service:put-public-access-block

Last Updated:Mar 20, 2026

Enables or disables Block Public Access for Object Storage Service (OSS) resources.

Prerequisites

Before you begin, ensure that you have:

  • ossutil installed and configured

  • The oss:PutPublicAccessBlock permission (required for RAM users and Security Token Service (STS) credentials — Alibaba Cloud root account credentials have this permission by default)

Syntax

ossutil api put-public-access-block --public-access-block-configuration <value> [flags]

Parameters

ParameterTypeDescription
--public-access-block-configurationstringThe Block Public Access configuration. Accepts XML or JSON. Use the file:// prefix to load the value from a file.
Note: This command maps to the PutPublicAccessBlock API operation. For supported global flags, see Command-line options.

Configuration format

XML:

<PublicAccessBlockConfiguration>
  <BlockPublicAccess>true</BlockPublicAccess>
</PublicAccessBlockConfiguration>

JSON:

{
  "BlockPublicAccess": "true"
}

Examples

Enable Block Public Access

Using an XML configuration file

  1. Create public-access-block-configuration.xml with the following content:

    <?xml version="1.0" encoding="UTF-8"?>
    <PublicAccessBlockConfiguration>
      <BlockPublicAccess>true</BlockPublicAccess>
    </PublicAccessBlockConfiguration>
  2. Run the command:

    ossutil api put-public-access-block --public-access-block-configuration file://public-access-block-configuration.xml

Using a JSON configuration file

  1. Create public-access-block-configuration.json with the following content:

    {
      "BlockPublicAccess": "true"
    }
  2. Run the command:

    ossutil api put-public-access-block --public-access-block-configuration file://public-access-block-configuration.json

Using an inline JSON value

ossutil api put-public-access-block --public-access-block-configuration "{\"BlockPublicAccess\":\"true\"}"

What's next