When users set bucket policies, the Action configuration (or NotAction configuration) does not match the Resource configuration (or NotResource configuration). For example, the Action is configured for the bucket, but the Resource is configured for objects.

Example

When you configure a bucket policy, the Action is set to tos:HeadBucket, but the Resource is set to trn:tos:::bucketname/*.

PUT /?policy HTTP/1.1​
Host: <Bucket name>.<TOS endpoint>​
Date: Fri, 30 Jul 2021 13:59:18 GMT​
Authorization: authorization xxx​
​
{​
    "Version": "2012-10-17",​
    "Statement": [​
        {​
            "Sid": "1",​
            "Effect": "Allow",​
            "Action": ["tos:HeadBucket"],​
            "Principal": "*",​
            "Resource": ["trn:tos:::bucketname/*"]​
        }        ​
    ]​
}​

Solution

Refer to bucket policy templates and parameter descriptions to correctly construct the bucket policy configuration. Ensure that the Action configuration (or NotAction configuration) matches the Resource configuration (or NotResource configuration).

Last updated: 2025.10.11 17:59:23

Public security network record in Beijing: No. 11010802032137