When a browser sends a request to a web server, the request header includes a "Referer" field that indicates the origin of the request. TOS can evaluate and decide whether to allow or deny access from that source based on the Referer allowlist that you configure.

Steps

Log in to the TOS console.

In the left navigation pane, click Buckets.

In the top menu bar, select the project of the bucket you want to manage.

On the Buckets page, click the name of the bucket.

In the left navigation pane, select Permissions > Bucket policies.

Edit the policy using your preferred view.

Visual view

JSON view

Click Create policy.

At the bottom of the Create Bucket Authorization Policy page, select Custom Policy and click Next.

Configure the following parameters.

Category	Parameter	Description
Basic configuration	Policy configuration method	Use the default option, i.e., Visual view.
Basic configuration		Policy name	Enter a name for the policy. The policy name must be unique within a bucket.
Effect	Effect	Select the effect of the policy. In this example, use the default value. Allow (Default): Allows the matched requests. Deny: Denies the matched requests.
Authorized user	Authorized user	Select All users.
Resource	Resource scope	Select Current bucket, Objects in bucket, and All objects.
Action	General Action	Check the box for * to select all actions.
		Bucket Action	Leave this section empty.
		Object Action	Leave this section empty.
		Operational strategy	Use the default option, i.e., Include the above actions. This option allows users to perform the specified actions.
Condition (Optional)	-	Click the Add Field icon. Then, set Key to Referer, Conditional operator to Equal To, and Value to http://console.volcengine.com. tip The like operator supports the wildcard (*). For more information about conditional operators, see Conditions. Common domains, wildcard domains, and IP addresses are supported. Start an address with http:// or https://. Separate multiple addresses with commas (,).

Save your settings by clicking Next.

After verifying the details, click Create.

Then, you will see the bucket policy that you just created in the policy list.

Torch Object Storage