You are viewing an old version of this page. View the current version.

Compare with Current View Page History

« Previous Version 8 Current »

Service Status

The Object Storage Unit (OSU) service is now END OF SALE. For more information, see End-of-Life Policy.

You can use an Access Control List (ACL) to set permissions for other users to access and manage your bucket. For more information, see Access Control List (ACL) Reference.

This feature is not available from Cockpit. This documentation only describes the procedure using AWS CLI.

  • To configure the ACL of a bucket, use the put-bucket-acl command following this syntax:

    Request Sample
    $ aws s3api put-bucket-acl \
        --profile YOUR_PROFILE \
        --bucket BUCKET \
        --acl private \
        --grant-full-control "id=123456789012, id=987654321098" \
        --grant-read "id=123456789012, id=987654321098" \
        --grant-read-acp "id=123456789012, id=987654321098" \
        --grant-write "id=123456789012, id=987654321098" \
        --grant-write-acp "id=123456789012, id=987654321098" \
        --endpoint ENDPOINT

    This command contains the following attributes that you need to specify:

    • (optional) profile: The named profile you want to use, created when configuring AWS CLI. For more information, see Installing and Configuring AWS CLI.
    • bucket: The name of the bucket for which you want to set the ACL. 
    • (optional) acl: The permissions you grant for your bucket (private | public-read | public-read-write | authenticated-read).
    • (optional) grant-full-control: One or more account IDs of users to whom you grant the full-control permission.

    • (optional) grant-readOne or more account IDs of users to whom you grant the read permission.
    • (optional) grant-read-acp: One or more account IDs of users to whom you grant the read-acp permission.
    • (optional) grant-write: One or more account IDs of users to whom you grant the write permission.
    • (optional) grant-write-acp: One or more account IDs of users to whom you grant the write-acp permission.

      • When specifying new permissions, all the previous permissions are replaced. Therefore, you need to specify both the existing permissions that you want to keep (including for yourself) and the new permissions that you want to give in a single command.
      • If you are the owner of the bucket, you can lose your own permissions but not the ability to manage the ACL itself.

      For more information about existing permissions, see Getting Information About a Bucket ACL and Getting Information About an Object ACL.

      • You can grant one or more permissions to one or more users in the same command.
      • You can specify the email address of a user instead of the account ID, using the following format:
    • endpoint: The endpoint corresponding to the service (oos or osuand Region you want to send the request to, in the following format: https://<SERVICE>.<REGION>

   The ACL is configured for your bucket.

Tutorial: Setting Up a Bucket with Objects

Previous Step:

(optional) Enabling or Disabling Bucket Versioning

Next Step:

AWS™ and Amazon Web Services™ are trademarks of Amazon Technologies, Inc or its affiliates in the United States and/or other countries.