Scenario	Related documentation
Authorizing IAM users under the current account	Allowing an IAM user to download an object in a directory Allowing an IAM user to upload and download objects in a bucket Allowing an IAM user to delete a bucket Allowing an IAM user to delete an object Granting an IAM user access to RenameObject
Authorizing other accounts and their IAM users	Allowing another account to access a directory of the current account Allowing another account to upload and download objects in a bucket of the current account
Managing tool access permissions	Allowing access to TOS resources via TOS Browser
Managing public read access	Managing bucket public read access Managing object public read access
Other scenarios	Blocking public access to TOS Denying access to buckets based on IP addresses Authorizing non-owners Setting up hotlink protection Using NotPrincipal, NotResource, and NotAction