How does minio set public permissions for buckets and prohibit public buckets from listing all files

The expiration time for obtaining the pre-signed URL of the Minio file storage private bucket is 7 days by default, and cannot be greater than 7 days. Considering performance issues, it is impossible for some public resources to obtain pre-signed URLs every time, so the public resources will be uniformly stored in a bucket with public readable and writable permissions.

1. Set public permissions for the bucket

 

 Since the bucket is set to public permission, if you access the bucket address, all files in the public bucket will be displayed

 2. Prohibit the public bucket from listing all files

The bucket has public read and write permissions. Direct access to the bucket will traverse all directories and files under the bucket, which may cause data leakage.

The file can be accessed through the concatenation of the bucket path and the file key.

 In order to prevent data leakage, we need to prohibit the public bucket from traversing all directories and files under the bucket

2.1 First we need to download S3 Browser ( https://s3browser.com/ ) S3 Browser - Amazon S3 Client for Windows. User Interface for Amazon S3. S3 Bucket Explorer.

 Enter the homepage of the official website to download. After the download is complete, double-click to install.

2.2 After the installation is complete, a pop-up window will pop up to configure the account

You can also click "Accounts" -> "Manage accounts" to manage accounts

2.3 Edit Bucket Policy

 

 

 For other settings, please refer to the official documentation:

S3 Browser - Amazon S3 Client for Windows. User Interface for Amazon S3. S3 Bucket Explorer.

Guess you like

Origin blog.csdn.net/weixin_52097724/article/details/125860052