Skip to content

Commit d4ce7b6

Browse files
zdover23zdover23
authored
Merge pull request ceph#62119 from MartinNowak/patch-2
doc/radosgw: Improve bucketpolicy.rst ceph#58689 - document SSE-C IAM condition key Reviewed-by: Anthony D'Atri <[email protected]>
2 parents d143a1a + 7b4ac88 commit d4ce7b6

File tree

1 file changed

+50
-47
lines changed

1 file changed

+50
-47
lines changed

‎doc/radosgw/bucketpolicy.rst‎

Lines changed: 50 additions & 47 deletions
Original file line numberDiff line numberDiff line change
@@ -155,53 +155,56 @@ Bucket Related Operations
155155
Object Related Operations
156156
~~~~~~~~~~~~~~~~~~~~~~~~~~
157157

158-
+-----------------------------+-----------------------------------------------+-------------------+
159-
|Permission |Condition Keys | Comments |
160-
| | | |
161-
+-----------------------------+-----------------------------------------------+-------------------+
162-
| |s3:x-amz-acl & s3:x-amz-grant-<perm> | |
163-
| | | |
164-
| +-----------------------------------------------+-------------------+
165-
| |s3:x-amz-copy-source | |
166-
| | | |
167-
| +-----------------------------------------------+-------------------+
168-
| |s3:x-amz-server-side-encryption | |
169-
| | | |
170-
| +-----------------------------------------------+-------------------+
171-
|s3:PutObject |s3:x-amz-server-side-encryption-aws-kms-key-id | |
172-
| | | |
173-
| +-----------------------------------------------+-------------------+
174-
| |s3:x-amz-metadata-directive |PUT & COPY to |
175-
| | |overwrite/preserve |
176-
| | |metadata in COPY |
177-
| | |requests |
178-
| +-----------------------------------------------+-------------------+
179-
| |s3:RequestObjectTag/<tag-key> | |
180-
| | | |
181-
+-----------------------------+-----------------------------------------------+-------------------+
182-
|s3:PutObjectAcl |s3:x-amz-acl & s3-amz-grant-<perm> | |
183-
|s3:PutObjectVersionAcl | | |
184-
| +-----------------------------------------------+-------------------+
185-
| |s3:ExistingObjectTag/<tag-key> | |
186-
| | | |
187-
+-----------------------------+-----------------------------------------------+-------------------+
188-
| |s3:RequestObjectTag/<tag-key> | |
189-
|s3:PutObjectTagging & +-----------------------------------------------+-------------------+
190-
|s3:PutObjectVersionTagging |s3:ExistingObjectTag/<tag-key> | |
191-
| | | |
192-
+-----------------------------+-----------------------------------------------+-------------------+
193-
|s3:GetObject & |s3:ExistingObjectTag/<tag-key> | |
194-
|s3:GetObjectVersion | | |
195-
+-----------------------------+-----------------------------------------------+-------------------+
196-
|s3:GetObjectAcl & |s3:ExistingObjectTag/<tag-key> | |
197-
|s3:GetObjectVersionAcl | | |
198-
+-----------------------------+-----------------------------------------------+-------------------+
199-
|s3:GetObjectTagging & |s3:ExistingObjectTag/<tag-key> | |
200-
|s3:GetObjectVersionTagging | | |
201-
+-----------------------------+-----------------------------------------------+-------------------+
202-
|s3:DeleteObjectTagging & |s3:ExistingObjectTag/<tag-key> | |
203-
|s3:DeleteObjectVersionTagging| | |
204-
+-----------------------------+-----------------------------------------------+-------------------+
158+
+-----------------------------+---------------------------------------------------+-------------------+
159+
|Permission |Condition Keys | Comments |
160+
| | | |
161+
+-----------------------------+---------------------------------------------------+-------------------+
162+
| |s3:x-amz-acl & s3:x-amz-grant-<perm> | |
163+
| | | |
164+
| +---------------------------------------------------+-------------------+
165+
| |s3:x-amz-copy-source | |
166+
| | | |
167+
| +---------------------------------------------------+-------------------+
168+
| |s3:x-amz-server-side-encryption | |
169+
| | | |
170+
| +---------------------------------------------------+-------------------+
171+
|s3:PutObject |s3:x-amz-server-side-encryption-aws-kms-key-id | |
172+
| | | |
173+
| +---------------------------------------------------+-------------------+
174+
| |s3:x-amz-server-side-encryption-customer-algorithm | |
175+
| | | |
176+
| +---------------------------------------------------+-------------------+
177+
| |s3:x-amz-metadata-directive |PUT & COPY to |
178+
| | |overwrite/preserve |
179+
| | |metadata in COPY |
180+
| | |requests |
181+
| +---------------------------------------------------+-------------------+
182+
| |s3:RequestObjectTag/<tag-key> | |
183+
| | | |
184+
+-----------------------------+---------------------------------------------------+-------------------+
185+
|s3:PutObjectAcl |s3:x-amz-acl & s3-amz-grant-<perm> | |
186+
|s3:PutObjectVersionAcl | | |
187+
| +---------------------------------------------------+-------------------+
188+
| |s3:ExistingObjectTag/<tag-key> | |
189+
| | | |
190+
+-----------------------------+---------------------------------------------------+-------------------+
191+
| |s3:RequestObjectTag/<tag-key> | |
192+
|s3:PutObjectTagging & +---------------------------------------------------+-------------------+
193+
|s3:PutObjectVersionTagging |s3:ExistingObjectTag/<tag-key> | |
194+
| | | |
195+
+-----------------------------+---------------------------------------------------+-------------------+
196+
|s3:GetObject & |s3:ExistingObjectTag/<tag-key> | |
197+
|s3:GetObjectVersion | | |
198+
+-----------------------------+---------------------------------------------------+-------------------+
199+
|s3:GetObjectAcl & |s3:ExistingObjectTag/<tag-key> | |
200+
|s3:GetObjectVersionAcl | | |
201+
+-----------------------------+---------------------------------------------------+-------------------+
202+
|s3:GetObjectTagging & |s3:ExistingObjectTag/<tag-key> | |
203+
|s3:GetObjectVersionTagging | | |
204+
+-----------------------------+---------------------------------------------------+-------------------+
205+
|s3:DeleteObjectTagging & |s3:ExistingObjectTag/<tag-key> | |
206+
|s3:DeleteObjectVersionTagging| | |
207+
+-----------------------------+---------------------------------------------------+-------------------+
205208

206209

207210
More may be supported soon as we integrate with the recently rewritten

0 commit comments

Comments
 (0)