This topic uses an example policy to demonstrate how to authorize a RAM user to manage an Object Storage Service (OSS) bucket.

The following policy indicates that the authorized RAM user can manage an OSS bucket named myphotos.

{
    "Version": "1",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": "oss:*",
            "Resource": [
                "acs:oss:*:*:myphotos",
                "acs:oss:*:*:myphotos/*"
            ]
        }
    ]
}