Object Storage Service:How UpdateBucketAntiDDosInfo works

Usage notes

By default, an Alibaba Cloud account has the permissions to update the Anti-DDoS protection status of a bucket. To perform this operation as a RAM user or by using Security Token Service (STS), you must have the oss:UpdateBucketAntiDDosInfo permission. For more information, see Common examples of RAM policies.

Request syntax

POST /?antiDDos HTTP/1.1
Date:  GMT Date
Host: BucketName.oss-cn-hangzhou.aliyuncs.com
Authorization: SignatureValue
x-oss-defender-instance: cbcac8d2-4f75-4d6d-9f2e-c3447f73****
x-oss-defender-status: Init
<AntiDDOSConfiguration>
  <Cnames>
    <Domain>abc1.example.cn</Domain>
    <Domain>abc2.example.cn</Domain>
  </Cnames>
</AntiDDOSConfiguration>

Request headers

Header	Type	Required	Example	Description
x-oss-defender-instance	String	Yes	cbcac8d2-4f75-4d6d-9f2e-c3447f73****	The Anti-DDoS instance ID.
x-oss-defender-status	String	Yes	Init	The new Anti-DDoS instance status. Valid values: Init: specifies the custom domain name to protect. Defending: optionally specifies the custom domain name to protect. HaltDefending: does not require a custom domain name. Important If you change the CNAME record mapped to the custom domain name, set this header to the current Anti-DDoS instance status. To remove Anti-DDoS protection from a bucket, set this header to HaltDefending.
AntiDDOSConfiguration	Container	No	N/A	The container for Anti-DDoS instance configurations.
Cnames	Container	No	N/A	The container for the domain name list of Anti-DDoS instances.
Domain	String	No	abc1.example.cn	The custom domain names to protect. Each bucket supports up to five custom domain names in the protection list of an Anti-DDoS instance.

For more information about common request headers included in this request, such as Host and Date, see Common HTTP headers.

Response headers

The response to an UpdateBucketAntiDDosInfo request contains only common response headers. For more information, see Common HTTP headers.

Examples

• Sample requests

POST /?antiDDos HTTP/1.1
Date: Thu, 17 Apr 2025 05:34:24 GMT
Host: oss-example.oss-cn-hangzhou.aliyuncs.com
Authorization: OSS4-HMAC-SHA256 Credential=LTAI********************/20250417/cn-hangzhou/oss/aliyun_v4_request,Signature=a7c3554c729d71929e0b84489addee6b2e8d5cb48595adfc51868c299c0c218e
x-oss-defender-instance: cbcac8d2-4f75-4d6d-9f2e-c3447f73****
x-oss-defender-status: Init
<AntiDDOSConfiguration>
  <Cnames>
    <Domain>abc1.example.cn</Domain>
    <Domain>abc2.example.cn</Domain>
  </Cnames>
</AntiDDOSConfiguration>

• Sample responses

HTTP/1.1 200 OK
Server: AliyunOSS
Date: Fri, 04 Mar 2022 05:34:24 GMT
Content-Length: 0
Connection: keep-alive
x-oss-request-id: 534B371674E88A4D8906****