To ensure business security and stability, Volcano Engine Torch Object Storage (TOS) plans to prohibit users from downloading .hap files from buckets via TOS default endpoints for public networks or transfer acceleration domain names starting December 1, 2025.

Estimated Change Time

2025-12-1 (Beijing Time). Please refer to the console for the specific time.

Change Description

For buckets created on or after December 1, 2025, TOS will prohibit users from downloading .hap files via default endpoints for public networks or transfer acceleration domain names, whether through anonymous requests or pre-signed URLs. Requests that violate this policy will be denied with the following error message:

HTTP/1.1 400 Bad Request​
​
{​
    "Code": "ApkDownloadForbidden",​
    "RequestId": "c35016853c8ceec656853c8-ac11c259-1r8dDM-LB-cb-tos-front-****",​
    "HostId": "TQHYhZZTikZoNVVNxzQdLLRFyBLz****",​
    "Message": "The APK file is not allowed to be distributed in a public network using the TOS endpoint, please use CNAME instead."​
}​

Impacts

This change does not affect buckets created before December 1, 2025. However, we recommend using custom domain names to access objects in these buckets.

For buckets created on or after December 1, 2025, downloading .hap files via default endpoints for public networks or transfer acceleration domain names will no longer be possible. However, you can still download these files via default endpoints for private networks, custom domain names, or CDN domain names. For more information, see Associating a custom domain.

If you have any questions about the changes, submit a ticket or contact your account manager for assistance.

Last updated: 2025.11.05 16:48:23

Public security network record in Beijing: No. 11010802032137