Help Center/ Object Storage Service/ Permissions Configuration Guide (Ally Region)/ Permission Configuration in Typical Scenarios/ Restricting Access to a Bucket for Specific IP Addresses
Updated on 2026-03-17 GMT+08:00
View PDF
Share

Restricting Access to a Bucket for Specific IP Addresses

Scenario

This case describes how to restrict the source IP addresses that can access an OBS bucket. The following shows how to deny a client access whose source IP address is within the range of 114.115.1.0/24.

Recommended Configuration

Bucket policy

Procedure

  1. In the bucket list, click the bucket name you want to go to the Overview page.
  2. In the navigation pane, choose Permissions.

Verification

Initiate an access request from an IP address within 114.115.1.0/24. The access is denied. Initiate an access request from an IP address outside 114.115.1.0/24. The access is allowed.

Related Scenarios

  • To allow only a specified IP address to access an OBS bucket, you need to create two bucket policies:

    Policy 1: Select Deny for Effect. Set Condition Operator to NotIpAddress and specify the allowed IP address as the Value.

    Policy 2: Select Allow for Effect. Set Condition Operator to IpAddress and specify the allowed IP address as the Value.