The RenameObject operation involves writing the renamed object to TOS. Therefore, one must have both RenameObject and PutObject permissions to perform this operation.

Recommended authorization method

We recommend using a bucket policy in this scenario. For more information about bucket policies, see Overview.

Notes

If a configured permission does not take effect, we recommend that you retry later, as there is a delay.

Steps

In the left navigation pane, click Buckets. In the Buckets list, click the bucket you want to manage.

In the left navigation pane, select Permissions > Bucket policies.

On the Bucket policies page, click the JSON view tab.

Click Edit. Then, copy the following content into the text box, and click Save.

{
"Statement": [
{
"Sid": "Bucket Read-Only-d0e6",
"Effect": "Allow",
"Principal": [
"210015****/iamuser"
],
"Action": [
"tos:PutBucketRename",
"tos:GetBucketRename",
"tos:DeleteBucketRename",
"tos:PutObject",
"tos:RenameObject"
],
"Resource": [
"trn:tos:::bucketname",
"trn:tos:::bucketname/*"
]
}
]
}

Next steps

Once the bucket policy has been created, the IAM user can use the PutBucketRename API to enable RenameObject, and rename objects in the bucket via the RenameObject API. For more information, see PutBucketRename and RenameObject.

Last updated: 2026.01.04 17:36:52

Public security network record in Beijing: No. 11010802032137