When a user sets a bucket policy, the Action configuration (or NotAction configuration) does not match the condition keys in the Condition configuration.

Example

When configuring a bucket policy, the Action is set to tos:HeadBucket, but the condition key in the Condition is x-tos-acl.

PUT /?policy HTTP/1.1​
Host: <Bucket name>.<TOS endpoint>​
Date: Fri, 30 Jul 2021 13:59:18 GMT​
Authorization: authorization xxx​
​
{​
    "Version": "2012-10-17",​
    "Statement": [​
        {​
            "Sid": "1",​
            "Effect": "Allow",​
            "Action": ["tos:HeadBucket"],​
            "Principal": "*",​
            "Resource": ["trn:tos:::bucketname"],​
            "Condition": {"StringLike":{"x-tos-acl": "xxx"}}​
        }        ​
    ]​
}​

Solution

Refer to bucket policy templates and parameter explanations to correctly construct the bucket policy configuration. Ensure the Action (or NotAction) configuration matches the condition keys in the Condition.

Last updated: 2025.10.11 17:59:22

Public security network record in Beijing: No. 11010802032137