mirror of
https://github.com/cubefs/cubefs.git
synced 2026-08-02 10:06:14 +00:00
69 lines
1.7 KiB
Go
69 lines
1.7 KiB
Go
// Copyright 2019 The CubeFS Authors.
|
|
//
|
|
// Licensed under the Apache License, Version 2.0 (the "License");
|
|
// you may not use this file except in compliance with the License.
|
|
// You may obtain a copy of the License at
|
|
//
|
|
// http://www.apache.org/licenses/LICENSE-2.0
|
|
//
|
|
// Unless required by applicable law or agreed to in writing, software
|
|
// distributed under the License is distributed on an "AS IS" BASIS,
|
|
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
|
|
// implied. See the License for the specific language governing
|
|
// permissions and limitations under the License.
|
|
|
|
package objectnode
|
|
|
|
/*
|
|
|
|
https://docs.aws.amazon.com/zh_cn/AmazonS3/latest/dev/example-bucket-policies.html
|
|
https://docs.aws.amazon.com/zh_cn/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_IPAddress
|
|
|
|
{
|
|
"Version": "2012-10-17",
|
|
"Id": "S3PolicyId1",
|
|
"Statement": [
|
|
{
|
|
"Sid": "IPAllow",
|
|
"Effect": "Allow",
|
|
"Principal": "*",
|
|
"Action": "s3:*",
|
|
"Resource": "arn:aws:s3:::examplebucket/*",
|
|
"Condition": {
|
|
"IpAddress": {"aws:SourceIp": "54.240.143.0/24"},
|
|
"NotIpAddress": {"aws:SourceIp": "54.240.143.188/32"}
|
|
}
|
|
}
|
|
]
|
|
}
|
|
|
|
{
|
|
"Id":"PolicyId2",
|
|
"Version":"2012-10-17",
|
|
"Statement":[
|
|
{
|
|
"Sid":"AllowIPmix",
|
|
"Effect":"Allow",
|
|
"Principal":"*",
|
|
"Action":"s3:*",
|
|
"Resource":"arn:aws:s3:::examplebucket/*",
|
|
"Condition": {
|
|
"IpAddress": {
|
|
"aws:SourceIp": [
|
|
"54.240.143.0/24",
|
|
"2001:DB8:1234:5678::/64"
|
|
]
|
|
},
|
|
"NotIpAddress": {
|
|
"aws:SourceIp": [
|
|
"54.240.143.128/30",
|
|
"2001:DB8:1234:5678:ABCD::/80"
|
|
]
|
|
}
|
|
}
|
|
}
|
|
]
|
|
}
|
|
|
|
*/
|
