Alibaba Cloud oss RAM Policy authorization configuration -- Alibaba Cloud oss access control

my scene

1. It allows specified users to upload to the specified directory through Alibaba Cloud's OSS Browser browser tool.
2. Users can only upload files, but cannot delete them
**

Quick code generation tool provided by Alibaba Cloud

http://gosspublic.alicdn.com/ram-policy-editor/index.html?spm=a2c4g.11186623.2.5.3a7d124bSHbfj2

configuration code

{
    "Version": "1",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": [
                "oss:ListBuckets",
                "oss:GetBucketStat",
                "oss:GetBucketInfo",
                "oss:GetBucketTagging",
                "oss:GetBucketLifecycle",
                "oss:GetBucketWorm",
                "oss:GetBucketVersioning",
                "oss:GetBucketAcl",
                "oss:ListCname"
            ],
            "Resource": "acs:oss:*:*:*"
        },
        {
            "Effect": "Allow",
            "Action": [
                "oss:GetObject",
                "oss:GetObjectAcl",
                "oss:*"
            ],
            "Resource": [
                "acs:oss:*:*:yun-live/yun_live_file/*"
            ]
        },
        {
            "Effect": "Allow",
            "Action": [
                "oss:ListObjects",
                "oss:Put",
                "oss:*"
            ],
            "Resource": [
                "acs:oss:*:*:yun-live"
            ],
            "Condition": {
                "StringLike": {
                    "oss:Delimiter": "/",
                    "oss:Prefix": [
                        "",
                        "yun_live_file/",
                        "yun_live_file/*"
                    ]
                }
            }
        },
        {
            "Effect": "Deny",
            "Action": [
                "oss:DeleteBucket"
            ],
            "Resource": [
                "acs:oss:*:*:*"
            ]
        },
        {
            "Effect": "Deny",
            "Action": [
                "oss:DeleteObject"
            ],
            "Resource": [
                "acs:oss:*:*:*"
            ]
        }
    ]
}

Operating procedures

insert image description here

Tool download address

https://help.aliyun.com/document_detail/209974.html?spm=a2c4g.11186623.6.903.3fcc7385TNiLUM
insert image description here

run tool