Skip to main content

Change Bucket Policy

When modifying a policy, you can add new rules, edit or delete existing ones. You can also add and delete conditions in rules.

Edit rule

When editing rules, you can change all settings, as well as add, modify, and delete conditions.

  1. In the Control Panel, in the top menu, click Products and select S3.

  2. Go to Buckets.

  3. Open the bucket page → Access policy tab.

  4. Click Edit.

  5. Open the rule card.

  6. Change the rule name.

  7. In the Access field, select the rule type.

  8. Specify the principal: select the users to whom the rule will apply:

    • all — to users with any role and unauthorized users who accessed the bucket;
    • authorized — for individual project users.

  9. If you selected access for authorized users, add users from the list.

  10. Select the set of actions applied in the rule:

  • reader — a set of rights to view the bucket and objects in it;
  • editor — a set of rights to edit the bucket and objects in it;
  • custom — an empty set to which you can add any actions;
  • all — a set of all actions.

  1. If you selected the Custom set, add actions to it.

  2. Optional: if you selected another set, add new actions or remove pre-filled ones if necessary. When editing a set, its type will change to Custom.

  3. Specify the bucket resources to which the rule will apply. You cannot specify resources of another bucket:

    • all bucket objects: <bucket_name>/*
    • objects with a specific prefix: <bucket_name>/<prefix>/*
    • object: <bucket_name>/<prefix>/<object_name>

  4. Optional: to add a condition that determines when the rule will apply, click Add condition. You can add any number of conditions. For the condition, specify:

    • key — the parameter to which the condition will apply;
    • operator — checks whether the value in the request matches the key value;
    • value — the key value; you can add multiple values;
    • optional: select the Apply if field exists checkbox (equivalent to the IfExists operator). If the checkbox is selected and the field with such a key exists, the condition will be applied. If the field does not exist, it will be created with the specified value.changes to the rule.

  5. Click Save.

Delete rule

  1. In the Control Panel, in the top menu, click Products and select S3.
  2. Go to Buckets.
  3. Open the bucket page → Access policy tab.
  4. Click Edit.
  5. In the menu of the rule, click Delete rule → Delete.