You can set up double-gated access control over your bucket resources by configuring VPC endpoint and bucket policies. This allows you to restrict access to specific resources within a private network and to specific VPCs simultaneously.

Use cases

In environments where VPCs are used for isolation, such as when different departments use separate VPCs, double-gated access control can limit which VPCs can access bucket resources. This ensures that only certain departments can access the bucket's resources.

Notes

Once the double-gated access control is set up, features such as mirror-based or redirect-based back-to-origin, as well as image and video processing and document preview, will no longer be available.

TOS can only obtain the authentication context, or SourceVpc, when requests are made using VPC endpoints.

Configuration methods

For how to configure double-gated access control, see Configuring access control with both VPC endpoint policies and permission policies.

Last updated: 2026.01.21 16:38:29

Public security network record in Beijing: No. 11010802032137