Cloud Access Management
- Product Introduction
- Getting Started
- User Guide
- Users
- Sub-Users
- Sub-User Security Credentials
- Collaborators
- Collaborator Security Credentials
- Message Recipients
- User Settings
- User Groups
- Role
- Identity Provider
- User-Based SSO
- Role-Based SSO
- Policies
- Definition
- Authorization Guide
- Syntax Logic
- Element Reference
- CAM-Enabled Role
- Container
- Microservice
- Essential Storage Service
- Data Process and Analysis
- Data Migration
- Relational Database
- Enterprise Distributed DBMS
- NoSQL Database
- Database SaaS Tool
- Networking
- CDN and Acceleration
- Network Security
- Data Security
- Application Security
- Domains & Websites
- Big Data
- Middleware
- Interactive Video Services
- Media On-Demand
- Cloud Real-time Rendering
- Game Services
- Cloud Resource Management
- Management and Audit Tools
- Monitor and Operation
- CAM-Enabled API
- Compute
- Edge Computing
- Distributed cloud
- Microservice
- Serverless
- Essential Storage Service
- Data Process and Analysis
- Data Migration
- Relational Database
- Enterprise Distributed DBMS
- Database SaaS Tool
- CDN and Acceleration
- Network Security
- Endpoint Security
- Business Security
- Application Security
- Domains & Websites
- Big Data
- Voice Technology
- Image Creation
- AI Platform Service
- Natural Language Processing
- Optical Character Recognition
- Interactive Video Services
- Stream Services
- Media On-Demand
- Media Process Services
- Cloud Real-time Rendering
- Game Services
- Education Sevices
- Cloud Resource Management
- Management and Audit Tools
- Monitor and Operation
- Practical Tutorial
- Supporting Isolated Resource Access for Employees
- Enterprise Multi-Account Permissions Management
- Implementing Attribute-Based Access Control for Employee Resource Permissions Management
- Business Use Cases
- TencentDB for MySQL
- CLB
- CMQ
- COS
- CVM
- VPC
- API Documentation
- User APIs
- Role APIs
- Making API Requests
- Identity Provider APIs
- Policy APIs
DocumentationCloud Access ManagementBusiness Use CasesCOSAuthorizing a Sub-account Read/Write Access to All Files in Specified Directory Except Specified Files
Authorizing a Sub-account Read/Write Access to All Files in Specified Directory Except Specified Files
Last updated: 2024-01-23 18:02:53
Authorizing a Sub-account Read/Write Access to All Files in Specified Directory Except Specified Files
Last updated: 2024-01-23 18:02:53
The organizational account
CompanyExample (ownerUin: 12345678; appId: 1250000000) has a sub-account Developer that requires read/write permissions for all objects except the Object1 object in the dir1 directory of the Bucket1 bucket of the COS service in the Shanghai region under the CompanyExample account.Solution A:
Step 1. Create the following policy according to the policy syntax:
{"version": "2.0","statement":[{"effect": "allow","action": "cos:*","resource": "qcs::cos:ap-shanghai:uid/1250000000:Bucket1-1250000000/dir1/*"},{"effect": "deny","action": "cos:*","resource": "qcs::cos:ap-shanghai:uid/1250000000:Bucket1-1250000000/dir1/Object1"}]}
Step 2. Associate the policy with the sub-account. For more information on authorization, please see Authorization Management.
Solution B:
Was this page helpful?
You can also Contact Sales or Submit a Ticket for help.
Yes
No