Object Storage Service:PutBucketPolicy

Permissions

An Alibaba Cloud account has all permissions by default. In contrast, a Resource Access Management (RAM) user or RAM role has no permissions by default. An Alibaba Cloud account or an administrator must grant permissions to the RAM user or RAM role using a RAM policy or a bucket policy.

Request syntax

PUT /?policy
Host: Host
Date: GMT Date
Authorization: SignatureValue
Policy written in JSON

Request headers

All headers in a DescribeRegions request are common request headers. For more information, see Common request headers.

Response headers

All headers in the response to a DescribeRegions request are common response headers. For more information, see Common response headers.

Examples

Bucket example

• Request sample

  PUT /?policy
  Content-Length: 230
  Host: oss-example.oss-cn-hangzhou.aliyuncs.com
  Date: Thu, 17 Apr 2025 12:51:09 GMT
  Authorization: OSS4-HMAC-SHA256 Credential=LTAI********************/20250417/cn-hangzhou/oss/aliyun_v4_request,Signature=a7c3554c729d71929e0b84489addee6b2e8d5cb48595adfc51868c299c0c218e
  {
     "Version":"1",
     "Statement":[
     {
       "Action":[
         "oss:PutObject",
         "oss:GetObject"
      ],
      "Effect":"Deny",
      "Principal":["1234567890"],
      "Resource":["acs:oss:*:1234567890:*/*"]
     }
    ]
  }

• Response sample

  HTTP/1.1 200 OK
  content-length: 0
  server: AliyunOSS
  x-oss-server-time: 87
  connection: keep-alive
  x-oss-request-id: 5C6E9EBD5CC26B28EE41****
  date: Thu, 21 Feb 2019 12:51:09 GMT

Vector bucket example

For a vector bucket, the region parameter in the Host uses a standard Alibaba Cloud region ID, such as cn-hangzhou, instead of a legacy OSS region, such as oss-cn-hangzhou, which is used for general-purpose buckets.

• Request sample

  PUT /?policy
  Content-Length: 230
  Host: exampebucket-123***456.cn-hangzhou.oss-vectors.aliyuncs.com
  Date: Thu, 17 Apr 2025 12:51:09 GMT
  Authorization: OSS4-HMAC-SHA256 Credential=LTAI********************/20250417/cn-hangzhou/oss/aliyun_v4_request,Signature=a7c3554c729d71929e0b84489addee6b2e8d5cb48595adfc51868c299c0c218e
  {
     "Version":"1",
     "Statement":[
         {
           "Action":[
             "oss:PutVectors",
             "oss:GetVectors"
          ],
          "Effect":"Deny",
          "Principal":["1234567890"],
          "Resource":["acs:ossvector:cn-hangzhou:1234567890:bucket/vector-example/*"]
         }
      ]
   }

• Response sample

  HTTP/1.1 200 OK
  content-length: 0
  server: AliyunOSS
  x-oss-server-time: 87
  connection: keep-alive
  x-oss-request-id: 5C6E9EBD5CC26B28EE41****
  date: Thu, 21 Feb 2019 12:51:09 GMT

SDK

You can call this operation using the SDKs for the following programming languages:

• Java

• Python V2

• Go V2

• Node.js

• PHP V2

• .NET

• C++

ossutil command-line tool

For information about the corresponding ossutil command, see put-bucket-policy.