Gestão das identidades e dos acessos (EN)

Last updated 8th December 2021

Objective

Learn how to manage your identity and access to your S3 Object Storage resources.

Requirements

Instructions

Possible actions via the OVHcloud Control Panel

Log in to the OVHcloud Control Panel, go to the Public Cloud section and select the Public Cloud project concerned. Select Object Storage in the left-hand menu.

Managing access to a bucket via a profile

You can define access to your buckets via predefined profiles.

Click on the ... at the end of your bucket line and then Add a user to a container.

Add a user to a container

Select the user to add to your bucket and click Next.

Add a user to my container

Set the accesses to your bucket for this user and click Confirm.

Add a user to my container - Role

Managing access to an object via a profile

You can also define access to your objects via predefined profiles.

Click on the ... at the end of the line of your object and then on Add a user to my object.

object menu

Select the user and click Next.

add user to my object

Select the access profile for this user and click Confirm.

add role to my object

Advanced resource access management

You can however refine the rights by importing a JSON configuration file. To do this, go to the S3 Users tab.

S3 User Menu

Click on the ... at the end of the line of your user and then click Import JSON file.

If you want to change the rights of a user, you may want to download the JSON configuration file first by clicking on Download JSON file.

Find below some examples of JSON configuration files:

Read/write access to a bucket and its objects

{
  "Statement":[{
    "Sid": "RWContainer",
    "Effect": "Allow",
    "Action":["s3:GetObject", "s3:PutObject", "s3:DeleteObject", "s3:ListBucket", "s3:ListMultipartUploadParts", "s3:ListBucketMultipartUploads", "s3:AbortMultipartUpload", "s3:GetBucketLocation"],
    "Resource":["arn:aws:s3:::hp-bucket", "arn:aws:s3:::hp-bucket/*"]
  }]
}

Read-only access to a bucket and its objects

{
  "Statement":[{
    "Sid": "ROContainer",
    "Effect": "Allow",
    "Action":["s3:GetObject", "s3:ListBucket", "s3:ListMultipartUploadParts", "s3:ListBucketMultipartUploads"],
    "Resource":["arn:aws:s3:::hp-bucket", "arn:aws:s3:::hp-bucket/*"]
  }]
}

Allow all operations on all resources in a project

{
  "Statement":[{
    "Sid": "FullAccess",
    "Effect": "Allow",
    "Action":["s3:*"],
    "Resource":["*"]
  }]
}

Read/write access to all objects in a specific folder ("/home/user2") in a specific bucket ("companybucket")

{
  "Statement":[{
    "Sid": "RWContainer",
    "Effect": "Allow",
    "Action":["s3:GetObject", "s3:PutObject", "s3:DeleteObject", "s3:ListBucket", "s3:ListMultipartUploadParts", "s3:ListBucketMultipartUploads", "s3:AbortMultipartUpload", "s3:GetBucketLocation"],
    "Resource":["arn:aws:s3:::companybucket", "arn:aws:s3:::companybucket/home/user2/*"]
  }]
}

List of supported actions

Action Scope
s3:AbortMultipartUpload Object
s3:CreateBucket Bucket
s3:DeleteBucket Bucket
s3:DeleteObject Object
s3:GetBucketLocation Bucket
s3:GetObject Object
s3:ListBucket Bucket
s3:ListBucketMultipartUploads Bucket
s3:ListMultipartUploadParts Object
s3:PutObject Object

Go further

Join our community of users on https://community.ovh.com/en/.


Esta documentação foi-lhe útil?

Não hesite em propor-nos sugestões de melhoria para fazer evoluir este manual.

Imagens, conteúdo, estrutura... Não hesite em dizer-nos porquê para evoluirmos em conjunto!

Os seus pedidos de assistência não serão tratados através deste formulário. Para isso, utilize o formulário "Criar um ticket" .

Obrigado. A sua mensagem foi recebida com sucesso.


Estes manuais também podem ser úteis...

OVHcloud Community

Aceda ao seu espaço comunitário. Coloque as suas questões, procure informações e interaja com outros membros do OVHcloud Community.

Discuss with the OVHcloud community

Em conformidade com a alteração à Diretiva 2006/112/CE, os preços com IVA podem variar de acordo com o país de residência do cliente
(por defeito, os preços com IVA apresentados incluem o IVA português em vigor).