All Products
Search
Document Center

Object Storage Service:How do I access objects whose names contain the .apk or .ipa extension as expected?

Last Updated:Oct 31, 2023

This topic describes why you cannot access objects whose names contain the .apk or .ipa extension as expected and provides solutions to resolve the issue.

Problem description

If you access objects whose names contain the .apk or .ipa extension by using object URLs that contain public domain names (example: bucketname.oss-[region].aliyuncs.com) or acceleration endpoints (example: bucketname.oss-accelerate.aliyuncs.com or bucketname.oss-accelerate-overseas.aliyuncs.com), the requests are denied. HTTP status code 400 and the ApkDownloadForbidden error code are returned.

Causes

To enhance data security, requests to access objects whose names contain the .apk or .ipa extension by using object URLs are denied after 00:00 (UTC+8) on August 15, 2023 if one of the following conditions are met:

  • You access these objects in buckets that are created after 00:00 (UTC+8) on August 15, 2023 by using object URLs that contain public domain names.

  • You access these objects in buckets for which the transfer acceleration feature is enabled after 00:00 (UTC+8) on August 15, 2023 by using object URLs that contain acceleration endpoints.

Solutions

Use custom domain names to access objects whose names contain the .apk or .ipa extension. For more information, see Map custom domain names.

Appendix

The following table describes the access methods for buckets in which objects whose names contain the .apk or .ipa extension are stored.

Creation date

Access method

Buckets created before 00:00 (UTC+8) on August 15, 2023

Public domain names

Buckets for which transfer acceleration is enabled before 00:00 (UTC+8) on August 15, 2023

Acceleration endpoints

Bucket created at any time

Internal domain names

Custom domain names

Include signatures in the Authorization header

Origin fetch from an OSS bucket by Alibaba Cloud CDN (an OSS bucket is used as the origin server)