Configure HTTPS requests and certificates

To use a custom domain name to access Object Storage Service (OSS) over HTTPS, you must purchase a digital certificate and configure certificate hosting. For more information, see Access OSS over HTTPS.

OSS supports both HTTP and HTTPS access by default. If the bucket owner (UID 175708322470****) wants to enforce that all requests from anonymous users to resources in the examplebucket bucket use HTTPS, the owner can configure the following bucket policy:

{
  "Version": "1",
  "Statement": [{
      "Effect": "Deny",
      "Action": [
        "oss:*"
      ],
      "Principal": [
        "*"
      ],
      "Resource": [
        "acs:oss:*:175708322470****:examplebucket",
        "acs:oss:*:175708322470****:examplebucket/*"
      ],
      "Condition": {
        "Bool": {
          "acs:SecureTransport": [
            "false"
          ]
        }
      }
    }
      ]
  }

For more information about the elements in the policy syntax, see RAM Policy.

For more information about how to configure a bucket policy, see Authorize users to access specific resources using a bucket policy.