Re: Restricting access to RadosGW/S3 buckets

[Janne Johansson <icepic.dz@xxxxxxxxx>]

Den tors 2 maj 2019 kl 23:41 skrev Vladimir Brik <vladimir.brik@xxxxxxxxxxxxxxxx>:

Hello
I am trying to figure out a way to restrict access to S3 buckets. Is it
possible to create a RadosGW user that can only access specific bucket(s)?

You can have a user with very small bucket/bytes quota so they can't make buckets of their own, then have another ID make these buckets and add the first user as allowed user to be able to write in them. The first user will not be able to list all buckets given to it, but if the names are predetermined, this might not be a showstopper.

--

May the most significant bit of your life be positive.

_______________________________________________
ceph-users mailing list
ceph-users@xxxxxxxxxxxxxx
http://lists.ceph.com/listinfo.cgi/ceph-users-ceph.com