user guide - developer-res-cbc-cn.obs.cn-north-1 ......obs is also compatible with most amazon s3...

Object Storage Service

User Guide

Issue 01

Date 2017-02-17

HUAWEI TECHNOLOGIES CO., LTD.

Copyright © Huawei Technologies Co., Ltd. 2017. All rights reserved.No part of this document may be reproduced or transmitted in any form or by any means without prior writtenconsent of Huawei Technologies Co., Ltd. Trademarks and Permissions

and other Huawei trademarks are trademarks of Huawei Technologies Co., Ltd.All other trademarks and trade names mentioned in this document are the property of their respectiveholders. NoticeThe purchased products, services and features are stipulated by the contract made between Huawei and thecustomer. All or part of the products, services and features described in this document may not be within thepurchase scope or the usage scope. Unless otherwise specified in the contract, all statements, information,and recommendations in this document are provided "AS IS" without warranties, guarantees orrepresentations of any kind, either express or implied.

The information in this document is subject to change without notice. Every effort has been made in thepreparation of this document to ensure accuracy of the contents, but all statements, information, andrecommendations in this document do not constitute a warranty of any kind, express or implied.

Huawei Technologies Co., Ltd.Address: Huawei Industrial Base

Bantian, LonggangShenzhen 518129People's Republic of China

Website: http://www.huawei.com

Email: [email protected]

Issue 01 (2017-02-17) Huawei Proprietary and ConfidentialCopyright © Huawei Technologies Co., Ltd.

i

http://www.huawei.com

mailto:[email protected]

Contents

1 Basic Knowledge of Huawei OBS..............................................................................................11.1 Definition........................................................................................................................................................................21.2 Basic Concepts............................................................................................................................................................... 31.2.1 Object...........................................................................................................................................................................31.2.2 Bucket..........................................................................................................................................................................31.2.3 AK and SK...................................................................................................................................................................41.2.4 Region..........................................................................................................................................................................41.2.5 Fragment......................................................................................................................................................................41.3 Advantages..................................................................................................................................................................... 51.4 Relationship Between OBS and Other Service Products............................................................................................... 51.5 Service Tariff.................................................................................................................................................................. 6

2 Quick Start...................................................................................................................................... 72.1 Registering an Huawei Enterprise Cloud Account.........................................................................................................82.2 Enabling the OBS Service.............................................................................................................................................. 92.3 Common Operations Using OBS Console................................................................................................................... 102.3.1 Browser Versions Supported by OBS Console..........................................................................................................102.3.2 Logging In to the OBS Console................................................................................................................................ 102.3.3 Creating a Bucket...................................................................................................................................................... 122.3.4 Creating a Folder....................................................................................................................................................... 132.3.5 Uploading a File........................................................................................................................................................ 142.3.6 Downloading a File................................................................................................................................................... 152.3.7 Deleting a File........................................................................................................................................................... 162.3.8 Deleting a Bucket...................................................................................................................................................... 162.4 Common Operations Using OBS Browser...................................................................................................................172.4.1 Installing OBS Browser.............................................................................................................................................172.4.2 Creating an Access Key (AK and SK)...................................................................................................................... 202.4.3 Logging In to OBS Browser......................................................................................................................................212.4.4 Creating a Bucket...................................................................................................................................................... 232.4.5 Creating a Folder....................................................................................................................................................... 252.4.6 Uploading a File or Folder.........................................................................................................................................262.4.7 Downloading a File or Folder....................................................................................................................................272.4.8 Deleting a File or Folder............................................................................................................................................272.4.9 Deleting a Bucket...................................................................................................................................................... 28

Object Storage ServiceUser Guide Contents


ii

3 Introduction to Huawei OBS Functions..................................................................................293.1 Accessing OBS Using Domain Names........................................................................................................................ 303.2 Access Control..............................................................................................................................................................303.2.1 ACL........................................................................................................................................................................... 303.2.2 Bucket Policy.............................................................................................................................................................323.2.3 Signature Verification................................................................................................................................................ 363.3 Access Log Record.......................................................................................................................................................363.4 Lifecycle Management................................................................................................................................................. 383.5 Static Website Hosting..................................................................................................................................................393.6 CORS............................................................................................................................................................................403.7 URL Validation.............................................................................................................................................................413.8 Adding External Buckets..............................................................................................................................................423.9 Fragment Management................................................................................................................................................. 423.10 Versioning...................................................................................................................................................................433.11 Server-Side Encryption...............................................................................................................................................433.12 Event...........................................................................................................................................................................443.13 Object URL.................................................................................................................................................................44

4 Using OBS on OBS Console......................................................................................................464.1 Browser Versions Supported by OBS Console.............................................................................................................474.2 Bucket Management..................................................................................................................................................... 474.2.1 Creating a Bucket...................................................................................................................................................... 474.2.2 Searching for a Bucket.............................................................................................................................................. 484.2.3 Viewing Basic Information About a Bucket..............................................................................................................494.2.4 Setting ACL Permissions for Buckets....................................................................................................................... 504.2.5 Configuring a Bucket Policy..................................................................................................................................... 524.2.6 Configuring Static Website Hosting.......................................................................................................................... 564.2.7 Configuring CORS.................................................................................................................................................... 594.2.8 Configuring Logging................................................................................................................................................. 614.2.9 Configuring a Lifecycle Management Rule.............................................................................................................. 624.2.10 Configuring URL Validation................................................................................................................................... 654.2.11 Versioning................................................................................................................................................................ 664.2.12 Event........................................................................................................................................................................684.2.13 Deleting a Bucket.................................................................................................................................................... 714.3 Object Management......................................................................................................................................................714.3.1 Creating a Folder....................................................................................................................................................... 714.3.2 Uploading a File........................................................................................................................................................ 724.3.3 Uploading a File with Server-Side Encryption..........................................................................................................734.3.4 Object URL................................................................................................................................................................754.3.5 Setting ACL Permissions for Objects........................................................................................................................764.3.6 Searching for a File or Folder....................................................................................................................................794.3.7 Downloading a File................................................................................................................................................... 794.3.8 Deleting a File........................................................................................................................................................... 80



iii

4.3.9 Deleting a Folder....................................................................................................................................................... 804.4 Managing Fragments.................................................................................................................................................... 804.5 Typical Application...................................................................................................................................................... 81

5 Using OBS Through OBS Browser.......................................................................................... 835.1 Basic Operations on OBS Browser.............................................................................................................................. 845.1.1 OBS Browser Overview............................................................................................................................................ 845.1.2 Installing OBS Browser.............................................................................................................................................855.1.3 Creating an Access Key (AK and SK)...................................................................................................................... 895.1.4 Logging In to OBS Browser......................................................................................................................................905.1.5 Configuring the System............................................................................................................................................. 925.1.6 Managing Accounts...................................................................................................................................................965.1.7 Updating OBS Browser............................................................................................................................................. 985.1.8 Feedback....................................................................................................................................................................995.2 Bucket Management................................................................................................................................................... 1005.2.1 Creating a Bucket.................................................................................................................................................... 1015.2.2 Searching for a Bucket............................................................................................................................................ 1035.2.3 Viewing Basic Information About a Bucket............................................................................................................1035.2.4 Setting ACL Permissions for Buckets..................................................................................................................... 1045.2.5 Configuring a Bucket Policy................................................................................................................................... 1065.2.6 Configuring CORS.................................................................................................................................................. 1105.2.7 Configuring Logging............................................................................................................................................... 1125.2.8 Configuring a Lifecycle Management Policy..........................................................................................................1145.2.9 Managing Fragments............................................................................................................................................... 1165.2.10 Adding External Buckets....................................................................................................................................... 1175.2.11 Deleting a Bucket...................................................................................................................................................1185.3 Object Management....................................................................................................................................................1185.3.1 Creating a Folder..................................................................................................................................................... 1195.3.2 Object URL..............................................................................................................................................................1205.3.3 Searching for a File or Folder..................................................................................................................................1215.3.4 Uploading a File or Folder.......................................................................................................................................1215.3.5 Uploading a File with Server-Side Encryption........................................................................................................1225.3.6 Downloading a File or Folder..................................................................................................................................1245.3.7 Deleting a File or Folder..........................................................................................................................................1245.4 Task Management.......................................................................................................................................................1245.4.1 Managing Upload Tasks.......................................................................................................................................... 1255.4.2 Managing Download Tasks..................................................................................................................................... 1265.4.3 Managing Deletion Tasks........................................................................................................................................ 1265.5 Example Scenario....................................................................................................................................................... 127

6 Troubleshooting........................................................................................................................ 1296.1 Troubleshooting About OBS Browser........................................................................................................................1306.1.1 Objects Cannot Be Globally Searched for in a Bucket............................................................................................1306.1.2 Object URL Cannot Be Opened Using a Browser.................................................................................................. 130



iv

6.1.3 No Upload Task Is Created After a Large Number of Files Are Selected for Upload Using OBS Browser.......... 1316.1.4 Blue or Black Screen of Death Occurs When Files Are Uploaded Using OBS Browser....................................... 1316.2 Troubleshooting About OBS Console........................................................................................................................ 1326.2.1 Object URL Cannot Be Opened Using a Browser.................................................................................................. 1326.2.2 Objects Cannot Be Globally Searched for in a Bucket............................................................................................1336.2.3 An Object Fails to Be Downloaded Using Internet Explorer 11............................................................................. 1346.2.4 OBS Console Cannot Be Opened Using Internet Explorer 9..................................................................................1346.2.5 The Object Name Changes After an Object with a Long Name Is Downloaded to a Local Computer.................. 135

7 Using OBS SDKs....................................................................................................................... 136

8 Obtaining More Resources...................................................................................................... 137



v

1 Basic Knowledge of Huawei OBS

About This ChapterThis chapter contains the definition, basic concepts, and advantages of Huawei object storageservice (OBS). It also describes the relationship between OBS and other service products.

1.1 Definition

1.2 Basic Concepts

1.3 Advantages

1.4 Relationship Between OBS and Other Service Products

1.5 Service Tariff

Object Storage ServiceUser Guide 1 Basic Knowledge of Huawei OBS


1

1.1 DefinitionObject storage service (OBS) is an object-based storage service that provides customers withmassive, secure, reliable, and cost-effective data storage capabilities, such as bucket creation,modification, and deletion, as well as object upload, download, and deletion. OBS can storeany type of file and is suitable for ordinary subscribers, websites, enterprises, and developers.

OBS provides web service interfaces using Hypertext Transfer Protocol (HTTP) andHypertext Transfer Protocol Secure (HTTPS). Users can access and manage data stored onOBS from any computer connected to the Internet using OBS Console or OBS Browser.

OBS is also compatible with most Amazon S3 application programming interfaces (APIs).Users can use Representational State Transfer (REST) APIs and software development kits(SDKs) to develop upper-layer applications or connect to Amazon S3 storage so that userscan focus on service applications and not have to worry about underlying storageimplementation technologies.

Huawei Enterprise Cloud allow for infrastructure to be deployed in multiple areas and deliverflexible expansion and enhanced reliability. Users can deploy OBS in specific areas to obtainfast access speeds at an affordable price.

OBS integrates a browser-based visualized and unified management console (browser/serverarchitecture), host-based clients (client/server architecture), SDKs (Java, .NET, Python, PHP,Android, C++, and Ruby), and REST APIs compatible with Amazon S3 APIs to help userseasily manage their own data stored on OBS and develop a wide range of upper-layerapplications.

OBS has the following functions:

l Creates and deletes buckets in specific regions (service areas)l Manages object by uploading (such as multipart upload), downloading, copying, and

deleting objectsl Manages bucket permissions, including bucket policies, access control lists (ACLs), and

cross-origin resource sharing (CORS)l Manages bucket versions, allowing multiple versions of objects to exist in a bucketl Supports setting website attributes for buckets, achieving static website hostingl Sets lifecycle management policies for buckets to automatically delete expired objectsl Sets web page redirection to redirect bucket requests to specific hostsl Provides Uniform Resource Locator (URL) validation to prevent object links of OBS

from being stolen by other websitesl Provides a variety of management and development platforms, such as OBS Console,

OBS Browser, SDKs (Java, .NET, Python, PHP, Android, C++, and Ruby), and RESTAPIs

OBS provides storage resources for the following applications:

l Massive storage resource poolsl Enterprise cloud disksl Static website hostingl Volume Backup Service



2

http://www.hwclouds.com/en-us/product/obs.html

http://www.hwclouds.com/en-us/product/vbs.html

l Video surveillance and archivingl Elastic BigData Service

1.2 Basic ConceptsThis section describes concepts related to OBS, including the object, bucket, access key ID(AK), secret access key (SK), and region.

1.2.1 ObjectAn object is a basic data unit of OBS. It contains both data and metadata that describes dataattributes. Data uploaded to OBS is stored into buckets as objects.

An object consists of a key, metadata, and data.

l A key specifies the name of an object. An object key is a character string containingbetween 1 and 1024 characters in UTF-8 format. The object key for each object in abucket must be unique.

l Metadata provides a description for an object. Metadata contains system metadata anduser metadata. All metadata is uploaded to OBS as key-value pairs.– System metadata is automatically generated by OBS and is used for processing

object data. System metadata includes Date, Content-length, Last-modify, andContent-MD5.

– User metadata is specified when users upload objects and is used to describeobjects.

l Data is the information contained by an object.

Generally, objects are managed as files. However, as an object-based storage service, OBSdoes not involve files or folders. For easy data management, OBS provides a method tosimulate folders. By adding a slash (/) in an object name, for example, test/123.jpg, you cansimulate test as a folder and 123.jpg as the name of a file under the test folder. However, thekey remains test/123.jpg.

On OBS Console or OBS Browser, you can use folders directly.

1.2.2 BucketA bucket is a virtual container used to store objects on OBS. OBS provides flat storagemethods based on buckets and objects. All objects in a bucket are on the same logical layer,eliminating the traditional multi-layer directory structure of file systems.

On OBS, bucket names must be unique and cannot be changed. When a bucket is created, itsACL is generated by default. The ACL records permissions of authorized users such as theread, write, and full control permissions. Only authorized users can perform bucketoperations, such as creating, deleting, viewing, and setting the ACL for buckets. A user cancreate a maximum of 100 buckets. However, the number and total size of objects in a bucketare not restricted. Users do not need to consider system scalability.

As OBS is based on REST HTTP and HTTPS, you can use URLs to locate resources. Forexample, if object test/123.jpg is stored in bucket testBucket and the bucket is located in theOBS Northern China (the domain name is obs.cn-north-1.myhwclouds.com), you can useURL http://testBucket.obs.cn-north-1.myhwclouds.com/test/123.jpg to locate the object.

Figure 1-1 illustrates the relationship between objects and buckets.



3

http://www.hwclouds.com/en-us/product/bigdata.html

Figure 1-1 Relationship between objects and buckets

1.2.3 AK and SKAKs and SKs are key pairs used to access OBS. When OBS APIs are used to access storeddata, AKs and SKs are used to generate authentication information.

After subscribing to OBS, you can log in to My Credential and create AKs and SKs based onsite requirements. The system identifies users who access the system by AKs, SKs are usedfor key authentication. For details, see section 5.1.3 Creating an Access Key (AK and SK).

l One AK maps to only one user but one user can have multiple AKs.

l One SK maps to one AK, forming a key pair for accessing OBS and thereby ensuringaccess security.

1.2.4 RegionWhen creating a bucket, you can specify a region for the bucket based on your requirementson the price, response latency, and request source. The specified region cannot be changedafter the bucket is created.

Huawei Enterprise Cloud has data centers in North China, East China, and South China. TheOBS service is available in the three data centers.

After a bucket is created, all objects uploaded to the bucket will be stored in the data center ofthe region.

1.2.5 FragmentAn object may fail to be uploaded to the target bucket using multipart upload due to certainreasons, such as a network interruption or manual suspension and cancellation. Whenmultipart load fails, some multipart upload task data that has not been combined exists in thebucket, and such data is called fragments.

After fragments are generated, they will be displayed on the Manage Fragments page 90days later. You can delete the fragments once they are displayed.



4

1.3 AdvantagesCompared with enterprise storage systems and household storage systems, OBS has thefollowing advantages:

l High availability

OBS delivers high availability by using node redundancy, which ensures solid reliabilityof object data and service node network.

l Enhanced data reliability

OBS stores object data in multiple copies and uses automatic repair technology thatensures the consistency of copies to improve the reliability of object data.

l Robust data security

User data can be encrypted using Secure Sockets Layer (SSL) before being transferred toOBS. OBS employs AKs and SKs to authenticate users and uses different methods, suchas ACLs and bucket policies, to control user access, ensuring security during datatransfer and access. Object data is randomly distributed in segments onto different disksof OBS. For this reason, if data on some disks is stolen, it cannot be restored to thecomplete object data.

l Flexible expansion

All nodes work in cluster mode. All functional nodes and clusters can be independentlyand smoothly expanded. Storage space can be scaled up and out as needed, boostingservice flexibility.

l Low maintenance cost

Data is stored on OBS, so enterprises do not need their own storage devices orprofessional maintenance personnel, reducing maintenance cost.

1.4 Relationship Between OBS and Other Service ProductsOBS provides an ultra-large storage space. You can use storage resources provided by OBS inconjunction with other cloud service products that you purchased.

OBS can serve as storage resource pools for the following service product:

l Data Express Service (DES)

Depending on the following service, OBS can perform server-side encryption on objects:

l Key Management Service (KMS)

Depending on the following service, OBS can authenticate users and set permissions forspecific users:

l Identity and Access Management (IAM)

Depending on the following service, OBS can notify users that OBS is being used by themthrough a message:

l Simple Message Notification (SMN)



5

http://www.hwclouds.com/en-us/product/obs.html

1.5 Service TariffOBS is charged based on service duration in the unit of hour. The settlement is implementedon the hour, and no minimum consumption amount is configured. The settlement involvesthree charging items:

l Charging by storage spaceUsers are charged based on the capacity of data that is stored in it. Multistep pricing isused. The cost per GB decreases as the storage capacity increases.– Charging factors: storage capacity and duration– Formula: Fee = Cost of 1 GB per hour x Storage capacity x Hours

l Charging by trafficUsers are charged based on the traffic used by user operations in the OBS. For a publicnetwork, users are charged based on traffic flowing out of the OBS. For an Intranet(within Huawei Enterprise Cloud, users are not charged for either traffic flowing in orout of the OBS.– Charging factor: traffic– Formula: Fee = Cost per GB bandwidth x Outbound bandwidth per month

l Charging by the number of requestsService requests of OBS are divided into upload, query, download, modification, anddeletion requests. Users are charged for all requests except deletion requests.– Charging factor: number of requests– Formula: Fee = Cost per request x Number of requests per month

For details on service tariff, go to Huawei Enterprise Cloud website.



6

http://support.hwclouds.com/en-us/pro_price/index.html

2 Quick Start

About This ChapterThis chapter describes how to use OBS over OBS Browser and OBS Console.

OBS provides a browser-based visualized and unified management console named OBSConsole (browser/server architecture) and a host-based client named OBS Browser (client/server architecture) to help you manage buckets and objects.

l OBS Console provides a complete bucket management function. It enables you to uploada file with a maximum of 50 MB but does not support the batch upload of multiple filesor the upload of a folder. If you want to manage advanced functions, such as bucketcreation, bucket deletion, and permission control, use OBS Console.

l OBS Browser does not support advanced functions, such as static website hosting ofbuckets, URL validation, and versioning control. However, it enables you to upload a filewith up to 48.8 TB (about 10,000 x 5 GB) and supports the batch upload of multiple filesand the upload of a folder. If you want to perform object management operations, such asfile or folder upload, download, and deletion, use OBS Browser.

2.1 Registering an Huawei Enterprise Cloud Account

2.2 Enabling the OBS Service

2.3 Common Operations Using OBS Console

2.4 Common Operations Using OBS Browser

Object Storage ServiceUser Guide 2 Quick Start


7

2.1 Registering an Huawei Enterprise Cloud AccountYou must register an Huawei Enterprise Cloud account before using OBS.

Procedure

Step 1 Open a browser.

Step 2 Type www.hwclouds.com/en-us in the address box and press Enter.

Step 3 In the upper right corner of the page, click Register.

The registration page is displayed.

Step 4 Enter the registration information. Choose I have read and agreed Privacy Protection andHuawei Enterprise Cloud User Agreement. and click Submit register message.

Step 5 Enter User Name, Email Address, and Enterprise according to the information displayed,and click Finish.



8

http://www.hwclouds.com/en-us

https://auth.hwclouds.com/authui/auth.html?locale=en-us#/register

When the following page is displayed, the registration is complete.

----End

2.2 Enabling the OBS ServiceYou must recharge the account before using the OBS service.

Procedure

Step 1 Log in to the OBS Console.

Step 2 Click Recharge. The recharging window is displayed.

Step 3 Recharge the account as prompted.

Step 4 After the recharging, close the window.

Step 5 On the home page, click Object Storage Service to enable the OBS service and log in to theOBS Console.



9

----End

2.3 Common Operations Using OBS ConsoleThis section describes how to perform common operations on OBS Console, such as creatingan access key, bucket, and folder, uploading, downloading, and deleting a file, as well asdeleting a bucket.

2.3.1 Browser Versions Supported by OBS ConsoleThis section describes the browser versions supported by OBS Console.

Browsers supported by OBS Console are shown in Table 2-1.

Table 2-1 Browser versions supported by OBS Console

SupportedBrowser

Supported Browser Version

Internet Explorer l Internet Explorer 9l Internet Explorer 10l Internet Explorer 11

Firefox Latest version

Chrome Latest version

2.3.2 Logging In to the OBS ConsoleThis section describes how to log in to the OBS Console using a web browser.

Procedure

Step 1 Open a browser.

Step 2 Type www.hwclouds.com/en-us in the address box and press Enter.

Step 3 In the upper right corner of the page, click Seller Marketplace.

The OBS Console login page is displayed.

Step 4 Enter your account and password to log in to the OBS Console.

To log in as an enterprise user, go to Step 4.1.

To log in as an individual user, go to Step 4.2.

1. Click Multitenant Login in the upper right corner and enter Enterprise Account, Username/Email address/Mobile number, and Password. Then click Log In.



10


To obtain the account and password, contact the enterprise administrator.

2. Click User Login in the upper right corner and enter User name/Email address/Mobilenumber, and Password. Then click Log In.If you have not registered with Huawei Enterprise Cloud, click Register and register anHuawei Enterprise Cloud account as prompted.



11

----End

2.3.3 Creating a BucketA bucket is a container used to store objects on OBS. This section describes how to create abucket.

Procedure

Step 1 Log in to OBS Console.

Step 2 Click Create Bucket in the upper left corner.

The following dialog box is displayed.



12

Step 3 Set Region and Bucket Name.

Parameter Description

Region Region where the bucket to be created is located.

Bucket Name Name of the bucket. Bucket Name must be globally unique.

Naming Rules Introduction to the bucket name rules.

NOTE

When a URL is used to access a bucket, the bucket name will become a part of the URL. According to DNSstandards, URLs do not support uppercase letters and cannot be used to access a bucket whose name containsuppercase letters. Therefore, a bucket name can contain only lowercase letters, digits, hyphens (-), andperiods (.). For example, if you attempt to access bucket MyBucket using the URL, bucket mybucket will beaccessed instead, causing an access error.

Step 4 Click OK.

NOTE

In a multi-region scenario, if you create a bucket in a region, delete it from the region later, and immediatelycreate a bucket with the same name in another region, the system will show a message stating that the bucketfailed to be created. In this case, wait one hour and create a bucket with the same name again. Then, thesystem will show a message stating that the bucket has been successfully created.

----End

2.3.4 Creating a FolderThis section describes how to create a folder on OBS Console.

Contextl There are no files or folders on OBS. For easy data management, OBS provides a

method to simulate folders. On OBS, an object is simulated as a folder by adding a slash(/) to the object name on OBS Console.



13

l The folder cannot be downloaded on OBS Console. However, you can batch downloadfiles in the folder. Alternatively, you can use OBS Browser to download the folder.

Procedure


Step 2 Select the bucket for which you want to create a folder under My Buckets and click ManageObjects.

The Manage Objects page is displayed.

Step 3 Click Create Folder.

Step 4 In the Folder Name text box, enter a name for the folder.l The folder name cannot contain the following special characters: \ / | : * ? " < >l The folder name cannot start or end with a period (.).l The folder name cannot exceed 1023 bytes. The length of a folder name is the sum of the

length of its own and the length of its upper-level directories, and cannot exceed 1023bytes. Levels of directories are automatically separated by slashes (/). For example, if theupper-level directory of folder01 is folder02, file name length is calculated based onfolder02/folder01/.

NOTE

If an access denial message is displayed when you are creating a folder, the possible causes are as follows:

l The access permission for the bucket is restricted by the ACL. For example, the user has no writepermission for the bucket.

l The access permission for the bucket is restricted by the bucket policy. For example, the user is forbiddento write data to the bucket during the current period of time, the user has no write permission for thebucket, or server-side encryption is not enabled on OBS Browser, which is against the bucket policy.

Consequently, when the message is displayed, check ACL settings and bucket policy settings to resolve theproblem.

Step 5 Click OK.

A message is displayed indicating that the folder has been successfully created.

----End

2.3.5 Uploading a FileThis section describes how to upload local files to OBS for storage.

Prerequisites

At least one bucket has been created.

Contextl You can upload a file up to 50 MB in size using OBS Console.l You cannot batch upload files on OBS Console. To upload multiple files, use OBS

Browser or invoke APIs or SDKs.l The file name cannot exceed 1023 bytes. The length of a file name is the sum of the

length of its own and the length of its upper-level directories, and cannot exceed 1023



14

bytes. Levels of directories are automatically separated by slashes (/). For example, if theupper-level directory of file01 is folder01, the file name length is calculated based onfolder01/file01.

Procedure


Step 2 Select the bucket to which you want to upload files under My Buckets and click ManageObjects. The Manage Objects page is displayed.

Step 3 Optional: Creating a Folder.

Step 4 Optional: Click the folder name in Object Name to open the folder.

Step 5 Click the icon in the red box in the following figure.

Step 6 Select the file that you want to upload and click Open.

Step 7 Click Upload.

A message is displayed indicating that the file was successfully uploaded.

NOTE

1. If a message stating that the server is busy is displayed when files are being uploaded, try again later.

2. If an access denial message is displayed when you are uploading a file, the possible causes are as follows:

The access permission for the bucket is restricted by the ACL. For example, the user has no writepermission for the bucket.

The access permission for the bucket is restricted by the bucket policy. For example, the user is forbiddento write data to the bucket during the current period of time, the user has no write permission for thebucket, or server-side encryption is not enabled on OBS Browser, which is against the bucket policy.

Consequently, when the message is displayed, check ACL settings and bucket policy settings to resolvethe problem.

----End

2.3.6 Downloading a FileThis section describes how to download a file from OBS to a local computer.



15

Procedure


Step 2 Select the bucket from which you want to download files under My Buckets and clickManage Objects.

Step 3 Select the file that you want to download.

Step 4 Click Download or Download As, and proceed as prompted.

----End

2.3.7 Deleting a FileThis section describes how to delete a file.

Procedure


Step 2 Select the bucket from which you want to delete files under My Buckets and click ManageObjects.

Step 3 Select a file and click Delete.

You can select multiple files and click Delete in the middle of the page to batch delete thefiles.

Step 4 Click OK.

A message is displayed indicating that the file has been successfully deleted.

----End

2.3.8 Deleting a BucketThis section describes how to delete a bucket.

Prerequisitesl The bucket is empty.l Only the bucket owner can delete a bucket.

Procedure


Step 2 In the middle of the page, select a bucket and click Delete.

NOTE

l A bucket and objects in the bucket can be deleted. However, before deleting a bucket, you must ensurethat all objects in the bucket have been deleted.

l The interval between deleting a bucket and creating another bucket with the same name as the deletedbucket varies in different application scenarios. For details, see section PUT Bucket in the ObjectStorage Service API Reference.



16

http://support.hwclouds.com/en-us/api-obs/en-us_topic_0019159334.html


Step 3 Click OK.

A message is displayed indicating that the bucket is successfully deleted.

----End

2.4 Common Operations Using OBS Browser

2.4.1 Installing OBS Browser

Procedure

Step 1 Download the OBS Browser software package.

1. In the browser, enter www.hwclouds.com/en-us to go to the enterprise cloud servicehomepage.

2. Click the area in the red box. The OBS details page is displayed.3. At the bottom of the page, click OBS Browser in the red box. The OBS Browser

download page is displayed.

4. Download the OBS Browser software package as instructed.

Step 2 Install OBS Browser.

1. Double-click the OBS Browser installation file, for example, OBS Browser.exe.2. In the installation wizard, click Next.



17


3. Click Browse and select an installation path. Click Next.

4. Click Install to start installation.



18

5. Click Finish.

Step 3 Double-click the obs.exe file to start OBS Browser.

----End



19

Follow-up Procedure

By default, the OBS Browser page is automatically displayed after OBS Browser is installed.You can add your account to manage resources on OBS. Alternatively, you can close OBSBrowser and log in to OBS Browser to add your account when necessary.

2.4.2 Creating an Access Key (AK and SK)This section describes how to create an access key (AK and SK).

Context

OBS uses AKs and SKs for signature verification to ensure that only authorized accounts canaccess specific OBS resources.

When accessing OBS, an account must provide a pair of access keys, that is an AK and anSK. The AK and SK support the authentication mechanism of Identity and AccessManagement (IAM). They are required when OBS is accessed using clients, APIs, or SDKs.The following describes AKs and SKs:

l An AK is the access key ID on OBS. One AK maps to only one user but one user canhave multiple AKs. OBS recognizes the users who access the system by their AKs.

l An SK is the secret access key on OBS. It is used to access OBS. Users generateauthentication information based on AKs and request header fields. SKs and AKs are inone-to-one matching.

Before logging in to OBS Browser, create your AK and SK on OBS Console.

Procedure


Step 2 In the upper right corner of the page, click the user name and choose My Credential.

Step 3 On the My Credential page, click Add Access Key below the Access Keys area.

Step 4 Enter the related information as prompted and save the newly created access key.



20

NOTE

To ensure access code security, store the access key safely. If you click Cancel in the Confirm dialog box,the access key will not be downloaded and cannot be downloaded later. In this case, you must delete theaccess key and create one later when necessary.

----End

Follow-up ProcedureIf an access key has a problem (for example, it is lost or leaked) or will be no longer used,click Delete to delete the access key or contact the administrator to reset the access key.

When deleting an access key, you must enter the login password and verification code. Adeleted access key cannot be restored.

2.4.3 Logging In to OBS BrowserThis section describes how to use OBS Browser to manage resources stored on OBS.

Procedure

Step 1 Double-click obs.exe to start it.

If you are starting OBS Browser for the first time, the Add Account page is automaticallydisplayed. Go directly to Step 4.

Step 2 In the upper right corner of OBS Browser, click the account name and then click ManageAccounts.

Step 3 In the Manage Accounts dialog box that is displayed, click Add Account.

Step 4 In the Add Account dialog box, enter the account information and click OK.



21

The account information includes the following parameters:

l Account NameThe account name is used only to uniquely identify an account and can be different fromthe OBS account registered with the Huawei Enterprise Cloud. The account name cannotexceed 50 characters.

l Storage TypeOBS Browser can be connected to OBS or other storage systems compatible withAmazon S3.– When OBS Browser is connected to OBS, set the storage type to OBS.– When OBS Browser is connected to other storage systems compatible with Amazon

S3, set the storage type to S3 compatible storage. You need to specify the server IPaddress or domain name of the storage. The format is IP address or domainname:port (port 443 for HTTPS and port 80 for HTTP). The access requests use the

HTTPS server by default. If you want to use the HTTP server, click the iconin the upper right corner and click System Configuration. Then deselect theEnable HTTPS option in the System Configuration dialog box that is displayed.



22

l AK and SKEnter the AK and SK created in My Credential after you register with a storage service,such as OBS. For details about how to obtain an AK and SK, see section 5.1.3 Creatingan Access Key (AK and SK).

Remember my secret access key is selected by default. If you do not select Remember mysecret access key, you must configure the Secret Access Key each time you log in to OBSBrowser.

Information about the new account is displayed in the Manage Account dialog box.

Step 5 Click OK. You can log in to OBS Browser using the account and check bucket and objectresources owned by the account.

Step 6 Optional: To manage objects owned by multiple accounts on OBS Browser, click the accountname and Manage Account to add multiple accounts. You can click a desired account toswitch to the account.

----End


Procedure

Step 1 Log in to OBS Browser.

Step 2 In the upper left corner on the page, click Create Bucket.

Step 3 In the Create Bucket dialog box that is displayed, enter a value for Bucket Name select aRegion from the drop-down list and click OK.



23

NOTE

If OBS Storage is selected when you log in to OBS Browser, the region information will be generatedautomatically and you do not need to enter the region information manually.

You can move the pointer over the icon behind the bucket name text box to view thenaming rules for a bucket. A user can create a maximum of 100 buckets on OBS.

The bucket name must be globally unique and comply with the following rules:

l Contains 3 to 63 characters, starts with a digit or letter, and supports only lowercaseletters, digits, hyphens (-), and periods (.)

l Cannot be an IP address.l Cannot start or end with a hyphen (-) or period (.).l Cannot contain two consecutive periods (.).l Cannot contain periods (.) and hyphens (-) adjacent to each other.

NOTE


Region information can be configured on OBS Browser. The following details theconfiguration procedure:

1. Decompress the OBS Browser software package to the local client.2. Open file region in folder OBS Browser in the installation path of OBS Browser.3. Change the value of parameter options in file region.

Enter the region information to be added to the end of parameter options in thefollowing format:{"key":"Region alias","value":"Region"}

The newly added information must be in the JSON format. The following table describesthe parameters.– key indicates a user-defined region alias. Its value is in the Region drop-down list

in the Create Bucket dialog box. For a convenient view, you are advised to enterno more than 25 characters.

– value indicates Region. Enter its value based on Region supported by OBS.For details about the value of Region information supported by OBS currently, see3.1 Accessing OBS Using Domain Names.Each time when a Region is added, a group of values will be added to options, thatis, {"key":"Region alias","value":"Region"}. Groups of values are separated bycommas (,). The following provides two configuration examples of newly addedregion01 and region02. Keep the values of other parameters in file regionunchanged."options":[{"key":"cn-north-1","value":"cn-north-1"},{"key":"region01_test","value":"region01"},{"key":"region02_test","value":"region02"}]

4. After file region is successfully modified, restart OBS Browser so that theconfigurations can take effect.



24

Step 4 In the dialog box that is displayed, click OK.

NOTE


----End

2.4.5 Creating a FolderThis section describes how to create a folder using OBS Browser.

ContextThere are no files or folders on OBS. For easy data management, OBS provides a method tosimulate folders. On OBS, an object is simulated as a folder by adding a slash (/) to the objectname on OBS Browser.

Procedure


Step 2 Click the bucket. Click Create Folder.

Step 3 In the dialog box that is displayed, enter a folder name and click OK.l The folder name cannot contain special characters, such as < > ? | / : \ * "l The folder name cannot start or end with a period (.).l The folder name cannot exceed 1023 bytes. The length of a folder name is the sum of the




25

NOTE





Step 4 Click OK.

----End

2.4.6 Uploading a File or FolderThis section describes how to upload local files or folders to OBS for storage.

Context

OBS Browser supports multipart upload. You can upload a single file up to 48.8 TB (equal to10,000 x 5 GB) in size.

The file or folder name cannot exceed 1023 bytes. The length of a file or folder name is thesum of the length of its own and the length of its upper-level directories, and cannot exceed1023 bytes. Levels of directories are automatically separated by slashes (/). For example, ifthe upper-level directory of file01 is folder01, the file name length is calculated based onfolder01/file01.

Procedure


Step 2 Click the bucket to which you want to upload files or folders.

Step 3 Click Upload. Then click Upload File or Upload Folder.

If you have enabled the Upload File function, it is a good practice to upload a maximum of100 files at a time for better user experience. If you need to upload more files, place the filesin a folder and use the Upload Folder function to upload the folder.

NOTE


2. If an access denial message is displayed when you are uploading a file or folder, the possible causes are asfollows:




Step 4 In the dialog box that is displayed, select the file or folder that you want to upload and clickOpen.



26

You can upload a folder or multiple files at a time. To upload multiple files, hold down Ctrlor Shift to select multiple files. You can also select all the files on the current page by holdingdown Ctrl+A. The operations are consistent with those on the Windows operating system.

The file or folder upload progress is displayed on the task management page. You cansuspend, run, or cancel an upload task based on site requirements. For details, see 5.4.1Managing Upload Tasks.

----End

2.4.7 Downloading a File or FolderThis section describes how to download a file or folder from OBS to a local computer.

Procedure


Step 2 Click the bucket. Then select a file or folder and click Download.

You can hold down Ctrl or Shift to select files or folders and batch download them. You canalso select all the files or folders on the current page by pressing Ctrl+A. The operations areconsistent with those on the Windows operating system.

Step 3 In the dialog box that is displayed, select save location and click OK.

The file or folder download progress is displayed on the task management page. You cansuspend or cancel a download task based on site requirements. For details, see section 5.4.2Managing Download Tasks.

----End

2.4.8 Deleting a File or FolderThis section describes how to delete a file or folder.

ContextDeleting a folder will delete all files in the folder. Ensure that all files in a folder can bedeleted before deleting the folder.

Procedure


Step 2 Click the bucket. Then select a file or folder and click Delete.

You can hold down Ctrl or Shift to select multiple files or folders and batch delete them. Youcan also select all the files or folders on the current page by pressing Ctrl+A. The operationsare consistent with those on the Windows operating system.

Step 3 Click OK.

The file or folder deletion progress is displayed on the task management page. You cansuspend or cancel a deletion task based on site requirements. For details, see section 5.4.3Managing Deletion Tasks.

----End



27


Prerequisitesl The bucket to be deleted is empty.l Only the bucket owner can delete a bucket.

Procedure


Step 2 In the bucket list, click the blank area in the row of a bucket and click Delete.

NOTE

l Before deleting a bucket, ensure that all objects in the bucket have been deleted and no multipart uploadtasks are running in the bucket.


Step 3 Click OK.

----End



28



3 Introduction to Huawei OBS Functions

About This ChapterThis chapter describes the main functions and application value of Huawei object storageservice (OBS).

3.1 Accessing OBS Using Domain Names

3.2 Access Control

3.3 Access Log Record

3.4 Lifecycle Management

3.5 Static Website Hosting

3.6 CORS

3.7 URL Validation

3.8 Adding External Buckets

3.9 Fragment Management

3.10 Versioning

3.11 Server-Side Encryption

3.12 Event

3.13 Object URL

Object Storage ServiceUser Guide 3 Introduction to Huawei OBS Functions


29

3.1 Accessing OBS Using Domain NamesOBS can be accessed using domain names. Different data centers are assigned differentdomain names. When accessing OBS using APIs or SDKs, you can use domain names tolocate resources on OBS.

Accessing OBS from the InternetWhen creating a bucket, you can specify a region (a cloud service zone) for the bucket.Huawei Enterprise Cloud has data centers in North China, East China, and South China. TheOBS service is available in the three data centers. You can specify a region for your bucketbased on your requirements for the price, response latency, and request source. .

The domain names for accessing OBS are as follows:

l obs.myhwclouds.comThe global domain name for accessing OBS. When this domain name is used, OBSlocates the data center based on requests.

l obs.cn-north-1.myhwclouds.comThe domain name for accessing data centers in North China.

l obs.cn-east-2.myhwclouds.comThe domain name for accessing data centers in East China.

l obs.cn-south-1.myhwclouds.comThe domain name for accessing data centers in South China.

l obs-website.cn-north-1.myhwclouds.comThe domain name for OBS static website hosting in North China.

l obs-website.cn-east-2.myhwclouds.comThe domain name for OBS static website hosting in East China.

l obs-website.cn-south-1.myhwclouds.comThe domain name for OBS static website hosting in South China.

NOTE

Ensure that the domain name used for accessing OBS from the Huawei Enterprise Cloud intranet is the sameas that used for accessing OBS from the Internet.

If a user creates a bucket named newbucket in North China, the domain name for accessingthe bucket is newbucket.obs.cn-north-1.myhwclouds.com.

3.2 Access ControlAccess requests to OBS can be controlled using ACLs, bucket policies, and signatureverification.

3.2.1 ACLOBS provides account-based ACLs to assign specific access permissions to accounts.

OBS uses an ACL to enable bucket and object access permissions to be assigned to five typesof authorized users, as listed in Table 3-1.



30

Table 3-1 Authorized users supported by OBS

Authorized User Description

Bucket Owner By default, the owner of a bucket has the ACL View and ACLEdit permissions and the two permissions cannot be modified.

Registered User A user that is registered with OBS. The user employs the AK andSK to access OBS.

Anonymous User A user that is not registered with OBS. If the access permissionfor a bucket and objects is assigned to an anonymous user, allusers can access the bucket and objects.

Log Delivery User A user that delivers bucket access logs. The user is configured forbucket log management.

Specific User A user that is assigned the permission to access a bucket by thebucket owner.

OBS supports five types of bucket and object access permissions, as listed in Table 3-2.

Table 3-2 Access permissions supported by OBS

Permission Description

Read A grantee with this permission for a bucket can obtain the list ofobjects in the bucket and the metadata of the bucket.A grantee with this permission for an object can obtain the objectcontent and metadata.

Write A grantee with this permission for a bucket can upload, overwrite,and delete any object in the bucket.This permission is not applicable for an object.

ACL View A grantee with this permission can obtain the ACL of a bucket orobject. A bucket or object owner has this permission permanently.

ACL Edit A grantee with this permission can update the ACL of a bucket orobject. A bucket or object owner has this permission permanently.A grantee with this permission can modify the access control policyand thus the grantee obtains full access permissions.

Full Control A grantee with this permission for a bucket has Read, Write, ACLView, and ACL Edit permissions.A grantee with this permission for an object has Read, Write, ACLView, and ACL Edit permissions.



31

NOTE

A request supports a maximum of 100 permissions.

The ACL of a bucket or object is overwritten after permissions for the bucket or object are granted, but nopermissions are added for the bucket or the object.

If no ACL permission is assigned for a new bucket, OBS automatically disables the access tothe bucket and objects by other users except the bucket owner.

For details about OBS ACLs, see the Object Storage Service API Reference.

3.2.2 Bucket PolicyA bucket owner can compile a bucket policy to restrict the access permission for the bucket.

A bucket policy is specified by the bucket owner and it defines the access permissions for abucket. After a bucket policy is created, access requests to the bucket are controlled by thebucket policy. The bucket policy controls access requests by accepting or rejecting therequests. Bucket policies are compiled in the JSON format. The following are two examplesof bucket policy configurations.

Granting an OBS account permission. In the following example, the account (whose DomainID is 783fc6652cf246c096ea836694f71855) is assigned the permission to obtain the logmanagement information about bucket logging.bucket3.

783fc6652cf246c096ea836694f71855 represents Domain ID and needs to be modified basedon actual conditions. You can click the username in the upper right corner of the OBSConsole page and click My Credential. Then you can see Domain ID on the My Credentialpage.

GetBucketLogging: value of the Action field that indicates the operation set in the policyand performed on the bucket. The Action field indicates all operations supported by OBS andcontains a string of case-insensitive characters. The value can be a wildcard character (*) thatindicates all operations. For example, "Action":["s3:List*", "s3:Get*"]. Enter a value based onsite requirements. For details about all operations supported by OBS, see section "BucketPolicy" in the Object Storage Service API Reference.

Allow: value of the Effect field that indicates permission in the policy is allowed or denied.The value of the Effect field must be Allow or Deny.

logging.bucket3: target bucket on which the policy works. The bucket name varies with siterequirements.

{"Id": "Policy1375342051334","Statement":[{"Sid": "Stmt1375240018061","Action":["s3:GetBucketLogging"],"Effect":"Allow", "Resource":"arn:aws:s3:::logging.bucket3","Principal":{"AWS": ["arn:aws:iam::783fc6652cf246c096ea836694f71855:root"]}}]}



32


Granting an OBS user permission. In the following example, the user (whose User ID is71f3901173514e6988115ea2c26d1999) of the account (whose Domain ID is783fc6652cf246c096ea836694f71855) is assigned the permission to set log management forbucket logging.bucket3.

219d520ceac84c5a98b237431a2cf4c2 represents Domain ID and71f3901173514e6988115ea2c26d1999 represents User ID. The two IDs need to be modifiedbased on actual conditions. You can click the username in the upper right corner of the OBSConsole page and click My Credential. Then you can see the two IDs on the My Credentialpage.

PutBucketLogging: value of the Action field that indicates the operation set in the policy andperformed on the bucket. The Action field indicates all operations supported by OBS andcontains a string of case-insensitive characters. The value can be a wildcard character (*) thatindicates all operations. For example, "Action":["s3:List*", "s3:Get*"]. Enter a value based onsite requirements. For details about all operations supported by OBS, see section "BucketPolicy" in the Object Storage Service API Reference.



{"Id": "Policy1375342051335","Statement":[{"Sid":"Stmt1375240018062","Action":["s3:PutBucketLogging"],"Effect":"Allow","Resource":"arn:aws:s3:::logging.bucket3","Principal":{"AWS":["arn:aws:iam::219d520ceac84c5a98b237431a2cf4c2:user/71f3901173514e6988115ea2c26d1999"]}}]}

Table 3-3 describes parameters in bucket policies.

Table 3-3 Parameters in bucket policies


Version The version that is consistent with Amazon S3. This parameter isoptional. The value can only be 2008-10-17.

Id The ID of the bucket policy. This parameter is optional and the valuemust be unique.



33


Statement The description of the bucket policy. This parameter is mandatory. Thestatement defines complete permission control. Each bucket policy canhave multiple statements, and each statement contains the followingparameters:l Sidl Effectl Principall NotPrincipall Actionl NotActionl Resourcel NotResourcel Condition

Effect The effect of the bucket policy. The statement can be sent to accept orreject requests. This parameter is mandatory. Possible values are Allowand Deny.

Sid The statement ID. This parameter is optional.

Principal The user on whom the bucket policy statement takes effect. Thisparameter is optional.Either Principal or NotPrincipal must be selected to specify the user onwhom the bucket policy statement takes effect or does not take effect.

Action The OBS operation on which the bucket policy statement takes effect.This parameter is optional.Either Action or NotAction must be selected to specify whether thebucket policy statement takes effect on the OBS operation.

Resource The object on which the bucket policy statement takes effect. Thisparameter is optional.Either Resource or NotResource must be selected to specify whetherthe bucket policy statement takes effect on the OBS resources.

After a bucket policy is created, OBS determines whether to accept or reject requests to thebucket based on the bucket policy.

l When no bucket policy statement matches with an access request, OBS rejects therequest by default.

l The priority of the Effect value in a new bucket policy is higher than that of Deny, thedefault value of OBS.

l The priority of Deny is higher than that of Allow.

For details about OBS bucket policies, see section Bucket Policy in the Object StorageService API Reference.



34



Examplel Assigning specific users the permission to obtain objects in specific buckets.

In the following example, the user (whose User ID isac49fefeb80247799fbaf43249eb73ed) of the account (whose Domain ID is783fc6652cf246c096ea836694f71855) is assigned the permission to obtain all objects inbucket mybucket.{"Version":"2008-10-17","Id":"aaaa-bbbb-cccc-dddd","Statement":[{"Effect":"Allow","Sid":"1","Principal":{"AWS":["arn:aws:iam::783fc6652cf246c096ea836694f71855:user/ac49fefeb80247799fbaf43249eb73ed"]},"Action":["s3:GetObject"],"Resource":"arn:aws:s3:::mybucket/*"}]}

l Limiting specific addresses' permission to access specific buckets.In the following example, the permission of address www.example.com to access allobjects in bucket mybucket is limited.{"Version":"2008-10-17","Statement":[{"Sid":"1","Effect":"Deny","Principal":{"CanonicalUser":["*"]},"Action":["s3:*"],"Resource":["arn:aws:s3:::mybucket/*"],"Condition": {"StringEquals":{"aws:Referer":["www.example.com"]}}}]}

l Listing objects in a bucket with conditions.In the following example, only account 219d520ceac84c5a98b237431a2cf4c2 isallowed to list objects prefixed with Obj in bucket mybucket.{"Version":"2008-10-17","Id":"aaaa-bbbb-cccc-dddd","Statement":[{"Effect":"Allow","Sid":"1","Principal":{"AWS":["arn:aws:iam::219d520ceac84c5a98b237431a2cf4c2:root"]},"Action":["s3:ListBucket"],"Resource":"arn:aws:s3:::mybucket","Condition":{"StringEquals":{"s3:prefix":"Obj"}}}]}

l Limiting the start time of accessing objects in a bucket.In the following example, the start time of accessing all objects in bucket mybucket byall users is limited.{"Version":"2008-10-17",



35

"Statement":[{"Sid":"1","Effect":"Allow","Principal":{"CanonicalUser":["*"]},"Action":["s3:*"],"Resource":["arn:aws:s3:::mybucket/*"],"Condition":{"DateGreaterThan":{"aws:CurrentTime":"2015-09-10T12:00:00Z"},"DateLessThan":{"aws:CurrentTime":"2015-09-10T15:00:00Z"}}}]}

3.2.3 Signature VerificationOBS uses AKs and SKs for signature verification to ensure that only authorized accounts canaccess specific OBS resources.




For details about how to obtain an AK and SK, see section Creating an Access Key (AK andSK).

A request to be sent to OBS must contain the SK, request time, request type, and otherinformation for authentication. Before authentication, OBS encodes the bucket name andobject names using URLEncode and generates required information for authentication.Accounts can access specific OBS resources only after they pass the signature authentication.

OBS supports Amazon V2 and V4 for authentication. In addition to using the HMAC-SHA256 algorithm, Amazon V4 introduces user data into signature computing. The headerfields introduced in signature computing can be specified by users, notably improving thesecurity of request authentication.

3.3 Access Log RecordOBS can record bucket access requests in logs for request analysis and log audit.

Logs occupy some OBS storage space rented by users, causing extra fees. For this reason,OBS does not collect bucket access logs by default.

For analysis or audit purpose, you can enable log management. Access logs enable a bucketowner to analyze the property, type, or trend of requests to the bucket in depth. After logmanagement is enabled for a bucket, OBS automatically logs access requests to the bucketand generates and writes log files into a specific target bucket.

Generated logs are named using the following format:

<TargetPrefix>YYYY-mm-DD-HH-MM-SS-<UniqueString>



36

l <TargetPrefix> indicates the specific target prefix.l YYYY-mm-DD-HH-MM-SS indicates the date and time when the log is generated.l <UniqueString> indicates a character string generated by OBS.

On OBS Console, if configured <TargetPrefix> ends with a slash (/), logs generated in thebucket are stored in the <TargetPrefix> folder in the target bucket to facilitate management.

For example:

l If the target bucket is bucket and target prefix is bucket-log/, all logs are stored in thebucket-log/ folder in bucket. The log file is named as follows: 2015-06-29-12-22-07-N7MXLAF1BDG7MPDV.

l If the target bucket is bucket and target prefix is bucket-log, all logs are directly storedin bucket. The log file is named as follows: bucket-log2015-06-29-12-22-07-N7MXLAF1BDG7MPDV.After log management is configured, you can view the operation logs in the target bucketthat stores the logs in about 5 minutes.

The following shows the access log of the target bucket:

787f2f92b20943998a4fe2ab75eb09b8 bucket [13/Aug/2015:01:43:42 +0000] 192.144.1.113 787f2f92b20943998a4fe2ab75eb09b8 281599BACAD9376ECE141B842B94535B REST.GET.BUCKET.LOCATION - "GET /bucket?location HTTP/1.1" 200 - 211 - 6 6 "-" "HttpClient" -

The access log of each bucket contains the information listed in Table 3-4.

Table 3-4 Bucket logging format

Name Description Example

BucketOwner ID of the bucket owner 787f2f92b20943998a4fe2ab75eb09b8

Bucket Bucket name bucket

Time Request timestamp [13/Aug/2015:01:43:42 +0000]

Remote IP Request IP address 192.144.1.113

Requester ID of the requester 787f2f92b20943998a4fe2ab75eb09b8

RequestID ID of the request 281599BACAD9376ECE141B842B94535B

Operation Operation REST.GET.BUCKET

Request-URI Request URI GET /bucket?location HTTP/1.1

HTTPStatus Return code 200

BytesSent Size of the HTTP response,expressed in bytes

211

TotalTime Processing time on the server 6

Turn-AroundTime

Total request processing time 6



37

For details about access logs, see section PUT Bucket logging in the Object Storage ServiceAPI Reference.

3.4 Lifecycle ManagementOBS can periodically delete objects in a bucket based on preset rules. That is, OBS supportsthe lifecycle management of objects.

Lifecycle management means periodically deleting objects in a bucket by configuring rules.Lifecycle management applies to the following scenarios:

l Periodically uploaded log files that may only need to be retained for one week or onemonth, and you want to delete these log files after they expire.

l Documents that are seldom accessed after a certain period of time, and you want todelete these documents.

You can define lifecycle management rules for identifying objects and manage lifecycles ofthe objects based on the rules. After unnecessary files are deleted, less OBS storage space isrequired, conserving resources

Lifecycle management rules have two key elements:

l Configuration policy

You can also specify the prefix of object names so that objects whose names have thisprefix are restricted by the rules. You can configure a lifecycle rule for a bucket so thatall objects in the bucket can be restricted by the lifecycle rule.

l Expiration time

You can specify the number of days after which objects are automatically deleted or theday after which an object that matches with a rule is deleted.

For example, the following files are stored on OBS on January 7, 2015:

l log/test1.log

l log/test2.log

l doc/example.doc

l doc/good.txt

The following files are stored on OBS on January 10, 2015:

l log/clientlog.log

l log/serverlog.log

l doc/work.doc

l doc/travel.txt

If the expiration time of objects prefixed with log/ is set to January 11, 2015 (or one daylater) on January 10, 2015, OBS will delete objects log/test1.log, log/test2.log, log/clientlog.log, and log/serverlog.log on January 11, 2015.

If the expiration time of objects prefixed with log/ is set to January 8, 2015 on January10, 2015, OBS will delete objects log/test1.log and log/test2.log that were last modifiedbefore January 8, 2015 on January 10, 2015 but will not delete objects log/clientlog.logand log/serverlog.log that were stored on OBS the same day.



38



NOTE

The deletion of an object may be delayed after the object expires. Generally, the delay does not exceed 48hours.

If you specify log/ as the prefix, OBS automatically deletes objects log/clientlog.log and log/serverlog.log when the expiration time arrives.

For details about lifecycle management, see section PUT Bucket lifecycle in the ObjectStorage Service API Reference.

3.5 Static Website HostingOBS allows you to configure static website hosting for your bucket on OBS.

You can upload the content files of the static website to your bucket on OBS and configure aread permission to anonymous users for these files, and then configure the static websitehosting mode for your bucket to host your static websites on OBS.

Static websites contain static web pages and some scripts that can run on clients, such asJavaScript and Flash. Different from static websites, dynamic websites rely on servers toprocess scripts, including PHP, JSP, and ASP.NET. OBS does not support scripts running onservers.

The configuration of static website hosting takes effect within 2 minutes. After the staticwebsite hosting settings take effect on OBS, you can use the following domain names toaccess the static website:

https://<bucketname>.<OBSstaticwebsitehostingdomainname> http://<bucketname>.<OBSstaticwebsitehostingdomainname>

For example, after configuring static website hosting for bucket mysite in the OBS NorthernChina zone (the static website hosting domain name is obs-website.cn-north-1.myhwclouds.com), you can use http://mysite.obs-website.cn-north-1.myhwclouds.com or https://mysite.obs-website.cn-north-1.myhwclouds.com toaccess your static website.

When configuring static website hosting, you can specify the index page and error pagereturned during website access:

l Default Home PageThe default home page specifies the default home page of the static website. When OBSConsole is used to configure static website hosting, only html web pages are supported.When APIs or SDKs are used to configure static website hosting, the Content-Type ofobjects must be specified.OBS does not allow the default home page to be set by specifying the directory level (forexample, /page/index.html).

l Default 404The error page specifies the error page returned when an error occurs during staticwebsite access. When OBS Console is used to configure static website hosting, onlyhtml web pages are supported. When APIs or SDKs are used to configure static websitehosting, the Content-Type of objects must be specified.

When using static website hosting, you can configure request redirection to redirect specificor all requests. Typical configurations include:



39



l Redirecting all requests to another site.

l Redirecting specific requests based on redirection rules.

NOTE

After changing the destination address for redirection, you must manually clear the browser cache so thatrequests will be redirected to the new destination address.

For example, if the original destination address for redirection is www.example.com, the systemautomatically jumps to www.example.com after you access the static website hosting address (or replicatethe address to another browser). After changing the destination address for redirection to www.test.com, youmust clear the browser cache. By doing so, when you access the static website hosting address, the systemautomatically jumps to www.test.com. Otherwise, the system will still jump to www.example.com.

For details about static website hosting, see section PUT Bucket website in the ObjectStorage Service API Reference.

3.6 CORSOBS supports cross-origin resource sharing (CORS) rules and allows resources on OBS to beaccessed across origins.

CORS is a browser standard mechanism provided by the World Wide Web Consortium(W3C). It defines the interaction methods between client-side web applications in one originand resources in another origin. In web page requests, website scripts and contents in oneorigin cannot interact with those in another origin because of Same Origin Policies (SOPs).

OBS supports 3.5 Static Website Hosting. Static websites stored on OBS can respond towebsite requests from another origin only when CORS is configured for the bucket.

OBS CORS is used in the following scenarios:

l Enables JavaScript and HTML 5 to be used to establish web applications that candirectly access resources on OBS. No proxy servers are required for transfer.

l Enables the dragging function of HTML 5 to be used to upload files to OBS (with theupload progress displayed) or update OBS contents using web applications.

l Hosts external web pages, style sheets, and HTML 5 applications in different origins.Web fonts or pictures on OBS can be shared by multiple websites.

The configuration of CORS takes effect within 2 minutes.

Table 3-5 describes parameters in CORS rules.

Table 3-5 Parameters in CORS rules


Allowed Origin Requests from this origin can access the bucket. Thisparameter is mandatory.Multiple matching rules are allowed. One rule occupies oneline, and allows one wildcard (*). For example:http://rds.example.comhttps://*.vbs.example.com



40




Allowed Method Specifies the acceptable operation type of buckets andobjects. This parameter is mandatory.The methods include GET, POST, PUT, DELETE, andHEAD.

Allowed Header Specifies the allowed header of cross-origin requests. Thisparameter is optional. Only CORS requests matching theallowed header are valid.You can enter multiple allowed headers (one per line) andeach line can contain only one asterisk (*). Spaces andspecial characters including &:< are not allowed.

Exposed Header Specifies the supplemented header in CORS responses,providing additional information for clients. This parameteris optional. It cannot contain spaces.You can enter multiple exposed headers (one per line).Spaces and special characters including *&:< are notallowed.

Cache Duration(s) Specifies the duration that a client can buffer CORSresponses, expressed in seconds. This parameter ismandatory.

For details about CORS, see section PUT Bucket CORS in the Object Storage Service APIReference.

3.7 URL ValidationOn a pay-per-use basis, OBS supports URL validation based on Referrers in HTTP headersto prevent a user's data on OBS from being stolen by other users. OBS supports bothwhitelists and blacklists.

To reduce costs, some websites steal links to other websites to enrich their own contents.Stealing links not only damages interests of the original websites but also increases workloadson the server. To resolve this problem, URL validation comes into being.

In HTTP, a website can detect the web page that accesses a target web page using theReferrers field. As the Referrers field can trace sources, specific techniques can be used toblock or return to specific web pages if the pages are not from the website. URL validationchecks whether the Referrers field in requests matches the whitelist or blacklist by settingReferrers. If the field matches the whitelist, the requests are allowed. Otherwise, the requestsare blocked or specific pages are displayed.

OBS supports URL validation based on Referrers in HTTP headers to prevent a user's dataon OBS from being stolen by other users. OBS supports both whitelists and blacklists.

l Referrers are separated from each other using newline.l When the whitelisted Referrers is empty but the blacklisted Referrers is not, all

websites except specified ones in the blacklist are allowed to access data in the targetbucket.



41



l When the whitelisted Referrers is not empty and the blacklisted Referrers is empty ornot empty, only specified websites in the whitelist are allowed to access data in the targetbucket.

NOTE

When the whitelisted Referrers is the same as the blacklisted Referrers, the blacklist takes effect. Forexample, if the Referrers fields of the whitelisted Referrers and blacklisted Referrers are set towww.example.com, the access request from www.example.com is blocked.

l When the whitelisted Referrers and blacklisted Referrers are empty, all websites areallowed to access data in the target bucket by default.

l URL validation is implemented only when users use URL signatures or anonymouslyaccess buckets and objects in the buckets. It will not be implemented for requests whoseheaders have the Authorization field.

l Before determining whether a user has the five types of permission (Full Control, Read,Write, ACL View, and ACL Edit) for a bucket or objects in the bucket, check whetherthe user complies with the URL validation principles of the Referrers field.

For example:

l If Whitelisted Referrers of bucket test-111 is set to http://example.com andBlacklisted Referrers is empty, only requests whose Referrers is http://example.comcan access data in the bucket.

l If Blacklisted Referrers of bucket test-111 is set to http://example.com andWhitelisted Referrers is empty, all requests except the requests whose Referrers ishttp://example.com can access data in the bucket.

3.8 Adding External BucketsOBS enables you to add buckets of other users if you have access permission for the buckets.By doing so, you can access the external buckets locally using your account.

After successfully adding an external bucket, you can see the external bucket in the bucket listusing your own account and have the ACL access permission for the bucket.

If you are assigned the write permission for bucket test, you can add bucket test to a localcomputer using your account. You can see bucket test in the bucket list on the left and havethe write permission for the bucket. That is, you can upload objects to, overwrite objects in,and delete objects from the bucket.

3.9 Fragment ManagementFragments are incomplete data in buckets generated due to data upload failures. Fragmentmanagement enables you to clear fragments that were generated 90 days ago.

The following lists examples of situations where fragments may be generated:

l The network is in poor condition, and the connection to the OBS server is interruptedfrequently.

l The upload task is manually interrupted.l The device is faulty.l The device is powered off suddenly.

The fragments need to be cleared to free up space.



42

3.10 VersioningOBS can store multiple versions of an object. You can quickly search for and restore differentversions or restore data in the event of misoperations or application faults.

Versioning is an effective means to restore overwritten or incorrectly deleted objects. Bydefault, versioning is disabled for new buckets on OBS. New objects will overwrite theexisting objects with the same names as the new ones in a bucket.

After versioning is enabled:

l When an object is uploaded, OBS automatically allocates a unique version ID for theobject. Objects with the same name are stored on OBS with different version IDs.

l Objects can be downloaded by version ID. By default, the latest object is downloaded ifthe version ID is not specified.

l Objects can be permanently deleted by specifying version IDs. If an object is deletedwith no version ID specified, the object will have a deletion mark with the uniqueversion ID but will not be actually deleted. If an access request is sent to the object, amessage is returned indicating that the object does not exist.

l The latest objects in a bucket are returned by default after a GET Object request. You canalso send a request to obtain a bucket's objects with all version IDs.

l All object versions except deletion marks stored on OBS are charged.

If versions of objects in a bucket do not need to be controlled, you can suspend versioning. Ifversioning is disabled:

l Old version data remains on OBS. You need to manually delete unnecessary old versiondata.


l All old object versions except deletion marks stored on OBS are charged.

Current OBS Browser does not support versioning. To use this function, use OBS Console,APIs, or SDKs to manage data on OBS.

For details about versioning, see section PUT Bucket versioning in the Object StorageService API Reference.

3.11 Server-Side EncryptionOBS allows users to encrypt objects using server-side encryption so that the objects can besecurely stored on OBS.

Key Management Service (KMS) uses Hardware Secure Modules (HSMs) to ensure keysecurity, enabling users to easily create and manage encryption keys. Keys are not displayedin plaintext outside HSMs, which effectively prevents key disclosure. All operationsperformed on keys are controlled and logged, and usage of all keys is recorded, meetingregulatory compliance requirements.

Currently, both OBS Console and OBS Browser support server-side encryption with KMS-managed keys (SSE-KMS). In SSE-KMS mode, OBS uses the keys provided by KeyManagement Service (KMS) for server-side encryption.



43



The objects to be uploaded can be encrypted using server-side encryption with KMS-managedkeys (SSE-KMS). You need to create a key using Key Management Service (KMS) or use thedefault key provided by KMS. Then you can use the KMS key to perform server-sideencryption when uploading objects on OBS.

After server-side encryption is enabled, objects data to be uploaded will be encrypted andstored on the server. When downloading the encrypted objects, the encrypted data will bedecrypted on the server and displayed in plaintext to users.

OBS supports both server-side encryption with KMS-managed keys (SSE-KMS) and server-side encryption with customer-provided keys (SSE-C) by invoking APIs. In SSE-C mode,OBS uses the keys and MD5 values provided by customers for server-side encryption. Fordetails about the APIs, see section Service-Side Encryption in the Object Storage ServiceAPI Reference.

3.12 EventYou can use SMN to send alarms and notifications, and trigger workloads. SMN is a reliableand scalable message notification service that supports massive data and automatically sendsmessages to subscribers through emails, SMS messages, and Apps, depending on theirrequirements. OBS Console supports event notification for the following event types:

l Use PUT to upload an object.l Use POST to upload an object.l Use S3curl to copy an object. OBS Console and OBS Browser do not support object

copy.l Upload objects in multipart.l Delete an object by version.l Delete an object not by version.

You can set an event notification by the prefix and suffix of an object. For example, add anevent and specify that the notification is sent only when the files suffixed with .jpg orprefixed with images/ are added to the storage bucket.

3.13 Object URLOBS allows anonymous users to access object data using object URLs.

When anonymous users are assigned the permission to read specific objects, the anonymoususers can quickly access the objects using the object URLs.

The object URL is in the format of https://domain name/bucket name/directory level/objectname. An example URL is: https://obs.myhwclouds.com/testbucket/test/testobject.txt.If theobject is in the root directory of the bucket, the URL does not contain a directory level.



44

NOTE

l If Versioning is enabled for a bucket and Show Version is enabled for the object list, the object URLcontains a version and is in the format of https://domain name/bucket name/directory level/object name?versionId=version, for example, https://obs.myhwclouds.com/testbucket/test/testobject.txt?versionId=00000150D1374C713176d5692e9292f6872c446b47e04cf4001B55445346485a.

l The browser-based object access method varies depending on the object type. You can directly open .txtand .html files using a browser. However, when you open .exe and .dat files using a browser, the files areautomatically downloaded to your local computer.



45

4 Using OBS on OBS Console

About This ChapterThe OBS management console enables you to perform most basic operations.

4.1 Browser Versions Supported by OBS Console

4.2 Bucket Management

4.3 Object Management

4.4 Managing Fragments

4.5 Typical Application

Object Storage ServiceUser Guide 4 Using OBS on OBS Console


46

4.1 Browser Versions Supported by OBS ConsoleThis section describes the browser versions supported by OBS Console.

Browsers supported by OBS Console are shown in Table 4-1.

Table 4-1 Browser versions supported by OBS Console

SupportedBrowser

Supported Browser Version

Internet Explorer l Internet Explorer 9l Internet Explorer 10l Internet Explorer 11

Firefox Latest version

Chrome Latest version

4.2 Bucket ManagementThis section describes a series of bucket management operations.


Procedure


Step 2 Click Create Bucket in the upper left corner.

The following dialog box is displayed.



47

Step 3 Set Region and Bucket Name.


Region Region where the bucket to be created is located.

Bucket Name Name of the bucket. Bucket Name must be globally unique.

Naming Rules Introduction to the bucket name rules.

NOTE


Step 4 Click OK.

NOTE


----End

4.2.2 Searching for a BucketThis section describes how to search for a bucket by entering characters contained in thebucket name on OBS Console.



48

Procedure


Step 2 In the search box in the upper right corner on the main page, enter characters contained in thename of the desired bucket.

Step 3 Click .

The found buckets are displayed in the bucket list.

For example, if you want to search for buckets whose names contain the test characters, youonly need to enter test in the search box in the upper right corner on the main page and click

. Then, all buckets that contain test in their names are displayed in the bucket list.

----End

4.2.3 Viewing Basic Information About a BucketThis section describes how to view basic information about a bucket, including the owner,capacity, location, and object quantity.

Procedure


Step 2 Select a desired bucket under My Buckets and click Manage Bucket Attributes.

Step 3 On the Basic tab page, view basic information about the bucket.

Table 4-2 Parameter description


Owner Owner of the bucket.

Space Used Total used capacity of the objects in the bucket.

Number of Objects Number of the objects stored in the bucket.

Region Region where the bucket is located.

Domain ID Unique identity of the bucket owner. It is the same as Domain IDon the My Credential page.



49


Created Time when the creation of a bucket is completed.

----End

4.2.4 Setting ACL Permissions for BucketsThis section describes how to set access control list (ACL) permissions for buckets.

Procedure


Step 2 Select the bucket for which you want to configure ACL permissions under My Buckets andclick Manage Bucket Attributes.

Step 3 Click Permission.

You can set ACL permissions for Bucket Owner, Anonymous User, Registered User, andLog Delivery User on the page. Assign user ACL permissions for target buckets by selectingthe permissions or delete permissions by deselecting the permissions. You can add ACLpermissions for specific users as required or click Delete next to specific permissions to deletepermissions.

OBS enables bucket access permissions to be assigned to five types of authorized users usingthe ACL. These users are listed and described in Table 4-3.





Anonymous User A user that is not registered with OBS. If the access permission fora bucket and objects is assigned to an anonymous user, all users canaccess the bucket and objects.



50



Specific User A user that is assigned the permission to access a bucket by thebucket owner.

OBS supports five types of bucket access permissions, as listed and described in Table 4-4.



Read The permission to obtain the list of objects in the bucket and themetadata of the bucket.

Write The permission to write a bucket. A user with the writepermission for a bucket can upload, overwrite, and delete anyobject in the bucket.

ACL View The permission to view the ACL of a bucket.A bucket owner has this permission.

ACL Edit The permission to modify the ACL of a bucket.A bucket owner has this permission.NOTE

Users with ACL modifying permission own full control of permissions.Exercise caution when assigning this permission to other users.

Full Control The permission to control a bucket and objects in the bucket. Auser assigned such a permission possesses all the permissionsmentioned above.

Step 4 Optional: Click Add Permission. Enter Domain ID of a specific user and set ACLpermission for the user.

You can obtain Domain ID on the My Credential page.



51


For details about ACL permissions, see section ACL in the Object Storage Service APIReference.

Step 5 Click Save.

A message is displayed indicating that bucket permissions have been set successfully.

----End

Follow-up ProcedureClick Delete to delete permissions of specific users when necessary.

4.2.5 Configuring a Bucket PolicyA bucket policy defines the access control policy of resources (buckets and objects) on OBS.

ContextAccess requests to a bucket are controlled by bucket policies. The bucket policy controlsaccess requests by accepting or rejecting the requests.

Procedure


Step 2 Select the bucket for which you want to configure a bucket policy under My Buckets andclick Manage Bucket Attributes.


Step 4 Click Configure Bucket Policy.

Step 5 In the Configure Bucket Policy text box, enter a specific bucket policy.

Bucket policies are compiled in the JSON format. The following are two examples of bucketpolicy configurations.




52















53


Step 6 Modify the configurations.

Table 4-5 describes the parameters of bucket policies. For details about OBS bucket policies,see section Bucket Policy in the Object Storage Service API Reference.










54






Step 7 Click OK.

----End



l Limiting specific addresses' permission to access specific buckets.In the following example, the permission of address www.example.com to access allobjects in bucket mybucket is limited.{"Version":"2008-10-17","Statement":[{"Sid":"1","Effect":"Deny","Principal":{"CanonicalUser":["*"]},"Action":["s3:*"],"Resource":["arn:aws:s3:::mybucket/*"],"Condition": {"StringEquals":{"aws:Referer":["www.example.com"]}



55

}}]}


l Limiting the start time of accessing objects in a bucket.In the following example, the start time of accessing all objects in bucket mybucket byall users is limited.{"Version":"2008-10-17","Statement":[{"Sid":"1","Effect":"Allow","Principal":{"CanonicalUser":["*"]},"Action":["s3:*"],"Resource":["arn:aws:s3:::mybucket/*"],"Condition":{"DateGreaterThan":{"aws:CurrentTime":"2015-09-10T12:00:00Z"},"DateLessThan":{"aws:CurrentTime":"2015-09-10T15:00:00Z"}}}]}

4.2.6 Configuring Static Website HostingThis section describes how to set static website hosting for buckets and use bucket domainnames to access static websites.

PrerequisitesUpload all of the website files required by the static website have been uploaded to thespecified bucket.

NOTICETo ensure that a hosted static website can be accessed by all users, set Read for the bucketstoring static website files to anonymous users. Then set anonymous users to be able to accessstatic website files in the bucket in bucket policies, ensuring that the users have sufficientaccess permissions for desired objects. The configuration of static website hosting takes effectwithin 2 minutes.



56

Procedure


Step 2 Select the bucket for which you want to configure static website hosting under My Bucketsand click Manage Bucket Attributes.

Step 3 Click Static Website Hosting.

Step 4 Click Enable website hosting.

Step 5 Set the values of Default Home Page and Default 404 Page.l Default Home Page

Only a file in the current bucket can serve as the home page of the static website. If thefile name is not entered, the default home page setting is disabled.OBS does not allow the default home page to be set by specifying the directory level (forexample, /page/index.html).

l Default 404 PageOnly a file in the current bucket can serve as the default 404 (Not Found) page of thestatic website. This error page is displayed when an incorrect path is accessed. If the filename is not entered, the default 404 error page setting is disabled.

Step 6 Optional: In Redirection Rules, configure redirection rules.

Requests that comply with the redirection rules are redirected to the specific host or page.

Redirection Rules are compiled in the JSON format. Each rule contains a Condition and aRedirect.

The following example shows a redirection rule template:

[{"Condition":{"KeyPrefixEquals":"folder1/"},"Redirect":{"HostName":"www.example.com"}},{"Condition":{"KeyPrefixEquals":"folder2/"},"Redirect":{"ReplaceKeyPrefixWith":"folder3/"}}]



57

In the preceding template, there are two redirection rules:

l Automatically redirect requests prefixed with folder1/ to host www.example.com.

l Automatically redirect requests prefixed with folder2/ to an object prefixed withfolder3/. For example, if object folder2/work.txt on OBS is renamed as folder3/work.txt and the redirection rules are enabled, access requests to folder2/work.txt willbe automatically directed to folder3/work.txt.

For details about redirection rules, see section PUT Bucket website in the Object StorageService API Reference.

Step 7 Click Save.

After the static website hosting settings take effect on OBS, you can use the following domainnames to access the static website. If you successfully access the website using the followingdomain names, static website hosting is successfully configured.

https://<bucketname>.<OBSstaticWebsiteHostingDomainname> http://<bucketname>.<OBSstaticWebsiteHostingDomainname>

For example, after configuring static website hosting for bucket mysite in the OBS NorthernChina zone (the static website hosting domain name is obs-website.cn-north-1.myhwclouds.com), you can use https://mysite.obs-website.cn-north-1.myhwclouds.com or http://mysite.obs-website.cn-north-1.myhwclouds.com toaccess your static website, which is the Endpoint on the page.

----End

Follow-up Procedure

You can select Disable website hosting to disable static website hosting or Redirect toanother host to redirect the page based on site requirements.

If Redirect to another host is selected, all access requests to the bucket will be redirected tospecified hosts.

NOTE

After changing the destination address for redirection, you must manually clear the browser cache sothat requests will be redirected to the new destination address.

For example, if the original destination address for redirection is www.example.com, the systemautomatically jumps to www.example.com after you access the static website hosting address (orreplicate the address to another browser). After changing the destination address for redirection towww.test.com, you must clear the browser cache. By doing so, when you access the static websitehosting address, the system automatically jumps to www.test.com. Otherwise, the system will still jumpto www.example.com.



58



4.2.7 Configuring CORSThis section describes how to use CORS in HTML5 to implement cross-origin access.

Procedure


Step 2 Select the bucket for which you want to configure CORS under My Buckets and clickManage Bucket Attributes.

Step 3 Click CORS Rule.

NOTE

You can set a maximum of 100 CORS rules for OBS.

Step 4 Click Add.



59

Step 5 In Add Rule, configure Allowed Origin, Allowed Method, Allowed Header, ExposedHeader, and Cache Duration(s).

Table 4-6 lists and describes the parameters of CORS rules.







60





Step 6 Click OK.

A message is displayed indicating that CORS configuration of the bucket is successful. Theconfiguration of CORS takes effect within 2 minutes.

----End

Follow-up Procedure

You can click Edit or Delete to edit or delete a configured rule based on site requirements.

4.2.8 Configuring LoggingAfter logging is enabled for a bucket, OBS automatically converts bucket logs into objectsfollowing the naming rules and writes the objects into a specific bucket.

Prerequisites

Assign the ACL View and Write permissions for the current bucket and the target bucketstoring logs to the log delivery user.

Procedure


Step 2 Select the bucket for which you want to configure logging under My Buckets and clickManage Bucket Attributes.

Step 3 Click Log Management.



61

Step 4 Click the OFF button.

Step 5 Set Target Bucket to store logs.

Step 6 Set Target Prefix to specify the prefix for log names.

After logging is enabled, generated logs are named using the following format:


l <TargetPrefix> indicates the specific target prefix.l YYYY-mm-DD-HH-MM-SS indicates the date and time when the log is generated.l <UniqueString> indicates a character string generated by OBS.

On OBS Console, if configured <TargetPrefix> ends with a slash (/), logs generated in thebucket are stored in the <TargetPrefix> folder in the target bucket to facilitate management.

For example:



Step 7 Click Save.

A message is displayed indicating that log management configuration of the bucket issuccessful.

----End

4.2.9 Configuring a Lifecycle Management RuleThis section describes how to define lifecycle management rules for a bucket so that the rulescan take effect on objects in the bucket.

Context

Lifecycle management means periodically deleting objects in a bucket by configuring rules.Lifecycle management applies to the following scenarios:




62


For details about how to configure lifecycle management, see PUT Bucket lifecycle in theObject Storage Service API Reference.

Procedure


Step 2 Select the bucket for which you want to configure a lifecycle management rule under MyBuckets and click Manage Bucket Attributes.

Step 3 Click Lifecycle Rule.

Step 4 Click Add.

Step 5 In Add Rule, configure a lifecycle management rule.l Enable

Select Enable to enable the lifecycle rule.l Policy

Match lifecycle rules with the prefixes of object names so that objects with such nameprefixes can be restricted by the lifecycle rules. You can also configure a lifecycle rulefor a bucket so that all objects in the bucket can be restricted by the lifecycle rule.

NOTE

l When By Prefix is selected and the specified prefix and the prefix of an existing lifecycle rule overlap,OBS regards the two rules as one and disables your rule. For example, if a rule with prefix abc exists inthe system, another rule whose prefix contains abc cannot be configured.

l If a lifecycle rule whose Policy is set to By prefix has been configured, you cannot configure a lifecyclerule whose Policy is set to For the entire bucket.

l If a lifecycle rule whose Policy is set to For the entire bucket has been configured, you cannot configurea lifecycle rule whose Policy is set to By prefix. The Add button becomes unavailable.

l Expiration TimeSet expiration time for Current version and Historical version to meet siterequirements.– By day specifies the number of days after which an object is automatically deleted.– By date specifies the day after which objects that match with a rule are deleted.

NOTE

Current version and Historical version are two concepts for Versioning. If Versioning is enabled,uploading objects with the same name to the same path generates different versions. The object uploaded lateris called Current version, and the object uploaded earlier is called Historical version.



63


l Rule NameIdentify lifecycle rules. The Rule Name contains a maximum of 255 characters.


l log/test1.logl log/test2.logl doc/example.docl doc/good.txt

You stored the following files on OBS are stored on January 10, 2015:

l log/clientlog.logl log/serverlog.logl doc/work.docl doc/travel.txt

If the expiration time of objects prefixed with log/ is set to January 11, 2015 (or one daylater) on January 10, 2015, OBS will delete objects log/test1.log, log/test2.log, log/clientlog.log, and log/serverlog.log on January 11, 2015.If the expiration time of objects prefixed with log/ is set to January 8, 2015 on January10, 2015, OBS will delete objects log/test1.log and log/test2.log that were last modified



64

before January 8, 2015 on January 10, 2015 but will not delete objects log/clientlog.logand log/serverlog.log that were stored on OBS the same day.

NOTE


Step 6 Click OK.

A message is displayed indicating that the lifecycle rule is successfully created.

----End

Follow-up Procedure

You can click Edit or Delete to edit or delete a configured lifecycle management rule.

4.2.10 Configuring URL ValidationOBS enables blacklisted URLs to be blocked whereas whitelisted URLs are permitted toavoid link theft.

Context

In HTTP, a website can detect the web page that accesses a target web page using theReferrers field. As the Referrers field can trace sources, specific techniques can be used toblock or return to specific web pages if the pages are not from the website. URL validationchecks whether the Referrers field in requests matches the whitelist or blacklist by settingReferrers. If the field matches the whitelist, the requests are allowed. Otherwise, the requestsare blocked or specific pages are displayed.

On a pay-per-use basis, OBS supports URL validation based on Referrers in HTTP headersto prevent a user's data on OBS from being stolen by other users. OBS supports bothwhitelists and blacklists.

The following describes the principles for setting Referrers:

l Referrers are separated from each other using newline.l When the whitelisted Referrers is empty but the blacklisted Referrers is not, all

websites except specified ones in the blacklist are allowed to access data in the targetbucket.

l When the whitelisted Referrers is not empty and the blacklisted Referrers is empty ornot empty, only specified websites in the whitelist are allowed to access data in the targetbucket.

NOTE

When the whitelisted Referrers is the same as the blacklisted Referrers, the blacklist takes effect. Forexample, if the Referrers fields of the whitelisted Referrers and blacklisted Referrers are set towww.example.com, the access request from www.example.com is blocked.

l When the whitelisted Referrers and blacklisted Referrers are empty, all websites areallowed to access data in the target bucket by default.

l URL validation is implemented only when users use URL signatures or anonymouslyaccess buckets and objects in the buckets. It will not be implemented for requests whoseheaders have the Authorization field.



65

l Before determining whether a user has the five types of permission (Full Control, Read,Write, ACL View, and ACL Edit) for a bucket or objects in the bucket, check whetherthe user complies with the URL validation principles of the Referrers field.

Procedure


Step 2 Select the bucket for which you want to configure URL validation under My Buckets andclick Manage Bucket Attributes.

Step 3 Click URL Validation. For details about rules of Referrers, see Context.

Step 4 Enter the Whitelisted Referrers and Blacklisted Referrers based on site requirements.

For example:

l If Whitelisted Referrers of bucket test-111 is set to http://example.com andBlacklisted Referrers is empty, only requests whose Referrers is http://example.comcan access data in the bucket.

l If Blacklisted Referrers of bucket test-111 is set to http://example.com andWhitelisted Referrers is empty, all requests except the requests whose Referrers ishttp://example.com can access data in the bucket.

Step 5 Click Save.

A message is displayed indicating a successful URL validation setting.

----End

Follow-up Procedure

To delete whitelisted or blacklisted websites, delete the websites in Whitelisted Referrers orBlacklisted Referrers and click Save.

4.2.11 VersioningOBS can store multiple versions of an object. You can quickly search for and restore theversions as well as restore data in the event of misoperations or application faults.



66

ContextVersioning is an effective means to restore overwritten or incorrectly deleted objects. Bydefault, the function is disabled for new buckets on OBS. New objects will overwrite theexisting objects with the same names as the new ones in a bucket.

After versioning is enabled:

l When an object is uploaded, OBS automatically allocates a unique version ID for theobject. Objects with the same name are stored on OBS with different version IDs.


l Objects can be permanently deleted by specifying version IDs. If an object is deletedwith no version ID specified, the object will have a deletion mark with the uniqueversion ID but will not be actually deleted. If an access request is sent to the object, amessage is returned indicating that the object does not exist.

l The latest objects in a bucket are returned by default after a GET Object request. You canalso send a request to obtain a bucket's objects with all version IDs.

l All object versions except deletion marks stored on OBS are charged.

If versions of objects in a bucket do not need to be controlled, you can suspend versioning. Ifversioning is disabled:

l Old version data remains on OBS. You need to manually delete unnecessary old versiondata.


l All old object versions except deletion marks stored on OBS are charged.

Procedure


Step 2 Select a desired bucket under My Buckets and click Manage Bucket Attributes.

Step 3 Click Versioning.

Step 4 Click Enable to enable versioning for objects in the bucket.

After enabling versioning, click Manage Objects. Then click Hide button to view versions ofobjects with the same name.

----End

Follow-up ProcedureOn the Versioning page, you can click Suspend to suspend versioning for the objects.



67

NOTE

Once being enabled, versioning cannot be disabled. It can only be suspended.

4.2.12 EventYou can use Simple Message Notification (SMN) to send alarms and notifications, and triggerworkflows.

ContextYou can use SMN to send alarms and notifications, and trigger workloads on OBS Console.SMN is a reliable and scalable message notification service that supports massive data andautomatically sends messages to subscribers through emails, SMS messages, and Apps,depending on their requirements. If the event is set to upload or delete for an object in abucket, SMN will send the event notification to you when you upload the object to or delete itfrom the bucket.

Procedure


Step 2 In the bucket drop-down list, select a bucket for you want to configure an event, and clickBucket Attribute.

Step 3 Click Event. The Event page is displayed.

Step 4 On the Event page, click Add to add an event.

Table 4-7 describes the event parameters.



Name Name of the event. The event name is self-defined. If theevent name is left blank, the system will automaticallygenerate a unique ID as the event name.



68


Event Event type. OBS supports event notification for thefollowing event types:l Put: Use PUT to upload an object. Only OBS Browser

supports using PUT to upload an object.l Post: Use POST to upload an object. Only OBS

Console supports using POST to upload an object.l Copy: Use S3curl to copy an object. OBS Console and

OBS Browser do not support object copy.l CompleteMultipartUpload: Upload objects in

multipart. Only OBS Browser supports multipart objectupload.

l Delete: Delete an object by version.l DeleteMarkerCreated: Delete an object not by

version.Multiple event types are applicable to the same object. Forexample, if you have selected Put, Copy, and Delete in theEvent check box for the same object, an event will be sentto you when you upload an object to, copy an object to, ordelete an object from the bucket where the object resides.

Prefix Specify the prefix of the object to which the event appliesto. In each storage bucket, the prefixes of the events havingthe same event type must not overlap with each other.For example, the event type of event A is set to Put and itsprefix is set to abc. If the event type of event B is also setto Put, its prefix cannot be set to abcd or another one thatoverlaps with abc.

Suffix Specify the suffix of the object to which the event appliesto. In each storage bucket, the suffixes of the events havingthe same event type must not overlap with each other.For example, the event type of event A is set to Put and itssuffix is set to abc. If the event type of event B is also setto Put, its suffix cannot be set to dabc or another one thatoverlaps with abc.



69


Send To Specify the SNM topic that authorizes OBS to publishmessages. The SMN topic is created on the SMN page.NOTE

After SMN topics are configured, neither delete any topic relatedto OBS Console events unless necessary nor cancel theauthorization of the topic related to OBS Console events to OBS.If the topic related to OBS Console events is deleted, or theauthorization of the topic to OBS is canceled, the followingconditions may occur:

1. The subscriber of the topic cannot receive notification.

2. The configurations of the unavailable topics will beautomatically cleared when the event configuration of thebucket is modified.

Before using SMN for the first time, apply for the public testpermission. For details, see Applying for the Beta SMN Service inthe Simple Message Notification User Guide.

The quick start of SMN is as follows:

1. Create an SMN topic.

2. Add subscription.

3. Modify the topic policy. Select OBS of Services that canpublish messages on the Policy page.For details, see Quick Start and Configuring a Topic Policy inthe Simple Message Notification User Guide.

Step 5 Click OK.

----End



70

Follow-up ProcedureTo modify configuration of an event, click Edit after the event. To delete an event, clickDelete after the event.


Prerequisitesl The bucket is empty.l Only the bucket owner can delete a bucket.

Procedure


Step 2 In the middle of the page, select a bucket and click Delete.

NOTE

l A bucket and objects in the bucket can be deleted. However, before deleting a bucket, you must ensurethat all objects in the bucket have been deleted.


Step 3 Click OK.

A message is displayed indicating that the bucket is successfully deleted.

----End

4.3 Object ManagementOn OBS, operations are performed based on objects. This chapter describes a series of objectmanagement operations.

4.3.1 Creating a FolderThis section describes how to create a folder on OBS Console.

Contextl There are no files or folders on OBS. For easy data management, OBS provides a

method to simulate folders. On OBS, an object is simulated as a folder by adding a slash(/) to the object name on OBS Console.



71



l The folder cannot be downloaded on OBS Console. However, you can batch downloadfiles in the folder. Alternatively, you can use OBS Browser to download the folder.

Procedure


Step 2 Select the bucket for which you want to create a folder under My Buckets and click ManageObjects.


Step 3 Click Create Folder.

Step 4 In the Folder Name text box, enter a name for the folder.l The folder name cannot contain the following special characters: \ / | : * ? " < >l The folder name cannot start or end with a period (.).l The folder name cannot exceed 1023 bytes. The length of a folder name is the sum of the


NOTE





Step 5 Click OK.

A message is displayed indicating that the folder has been successfully created.

----End

4.3.2 Uploading a FileThis section describes how to upload local files to OBS for storage.

Prerequisites

At least one bucket has been created.

Contextl You can upload a file up to 50 MB in size using OBS Console.l You cannot batch upload files on OBS Console. To upload multiple files, use OBS

Browser or invoke APIs or SDKs.l The file name cannot exceed 1023 bytes. The length of a file name is the sum of the

length of its own and the length of its upper-level directories, and cannot exceed 1023



72

bytes. Levels of directories are automatically separated by slashes (/). For example, if theupper-level directory of file01 is folder01, the file name length is calculated based onfolder01/file01.

Procedure


Step 2 Select the bucket to which you want to upload files under My Buckets and click ManageObjects. The Manage Objects page is displayed.

Step 3 Optional: Creating a Folder.

Step 4 Optional: Click the folder name in Object Name to open the folder.

Step 5 Click the icon in the red box in the following figure.

Step 6 Select the file that you want to upload and click Open.

Step 7 Click Upload.

A message is displayed indicating that the file was successfully uploaded.

NOTE

1. If a message stating that the server is busy is displayed when files are being uploaded, try again later.2. If an access denial message is displayed when you are uploading a file, the possible causes are as follows:

The access permission for the bucket is restricted by the ACL. For example, the user has no writepermission for the bucket.The access permission for the bucket is restricted by the bucket policy. For example, the user is forbiddento write data to the bucket during the current period of time, the user has no write permission for thebucket, or server-side encryption is not enabled on OBS Browser, which is against the bucket policy.Consequently, when the message is displayed, check ACL settings and bucket policy settings to resolvethe problem.

----End

4.3.3 Uploading a File with Server-Side EncryptionOBS allows users to encrypt objects using server-side encryption so that the objects can besecurely stored on OBS.



73

Prerequisites

The KMS Administrator permission has been added in the region of OBS using Identity andAccess Management (IAM). For details about how to add the permission, see section How DoI Create User Groups and Assign Rights? in the Identity and Access Management UserGuide.

A key has been created using KMS. For details about how to create a key using KMS, seesection Creating a Key in the Key Management Service User Guide.

Context

After server-side encryption is enabled, when uploading objects, data will be encrypted andstored on the server. When downloading the encrypted objects, the encrypted data will bedecrypted on the server and displayed in plaintext to users.

KMS is used to encrypt the objects to be uploaded.

Before performing an open beta test (OBT) for KMS, the OBT permission needs to be appliedfor. After the OBT permission is obtained and the OBT is passed, you can use KMS. KMS isautomatically enabled after commercial use.

Currently, the server-side encryption through OBS Console can be applied only to objects inbuckets in North China.

Procedure


Step 2 Select the bucket to which you want to upload objects under My Buckets and click ManageObjects.

Step 3 Click the button shown in the red square box in the following figure to select the object to beuploaded.

Step 4 Select KMS encryption.

In the Configure Key dialog box that is displayed, set Key Name and click OK to save thekey settings.



74

Key Name: It is created using KMS and is used for encrypting and protecting data encryptionkeys. For details about how to create a key using KMS, see section Creating a Key in theKey Management Service User Guide.

Key ID: indicates the identifier of the master key. This parameter is the unique identifier ofthe master key in a database.

Step 5 Optional: After the object is uploaded, click the arrow icon on the left of the object. To viewthe object encryption status, click Details. The object encryption status cannot be changed.

----End

4.3.4 Object URLOBS allows anonymous users to access object data using object URLs.

Procedure


Step 2 Under My Buckets, select the bucket where the object you want to share resides. And clickManage Objects.

Step 3 Click the arrow icon before the object name.

Step 4 Click Permission to assign the anonymous user the permission to read the object.

NOTE

You cannot share the objects that are encrypted using KMS.



75

Step 5 Click Save to save the ACL permission settings.

Step 6 Click Link.

The URL is displayed on the page. The anonymous user can access the object by clicking theURL. The object URL is in the format of https://domain name/bucket name/directory level/object name.

An example URL is: https://obs.myhwclouds.com/testbucket/test/testobject.txt. If the object isin the root directory of the bucket, the URL does not contain a directory level.

NOTE

l If Versioning is enabled for a bucket and Show Version is enabled for the object list, the object URLcontains a version and is in the format of https://domain name/bucket name/directory level/object name?versionId=version, for example, https://obs.myhwclouds.com/testbucket/test/testobject.txt?versionId=00000150D1374C713176d5692e9292f6872c446b47e04cf4001B55445346485a.

l The browser-based object access method varies depending on the object type. You can directly open .txtand .html files using a browser. However, when you open .exe and .dat files using a browser, the files areautomatically downloaded to your local computer.

----End

4.3.5 Setting ACL Permissions for ObjectsThis section describes how to set ACL permissions for objects.



76

Procedure


Step 2 Under My Buckets, select the bucket for which you want to configure ACL permissions forobject and click Manage Objects.

Step 3 Click the arrow icon before the object name. And click Permission.

You can set ACL permissions for Object Owner, Anonymous User, Registered User, andLog Delivery User on the page. You can assign the preceding user ACL permissions fortarget objects by selecting the permissions or delete permissions by deselecting thepermissions. You can add ACL permissions for specific users as required or click Delete nextto specific permissions to delete permissions.

NOTE

For the encrypted objects, you cannot set the ACL permission of the Anonymous User, Registered User,and Log Delivery User. Meanwhile, Add Permission operation is not supported.

OBS enables object access permissions to be assigned to five types of authorized users usingthe ACL, as listed in Table 4-8.



Object Owner The owner of an object. It can disable or enable read and writepermissions but cannot modify other permissions.


Anonymous User A user that is not registered with OBS. If the access permission foran object is assigned to an anonymous user, all users can access theobject.



77



Specific User A user that is assigned the permission to access an object by theobject owner.

OBS supports five types of object access permissions, as shown in Table 4-9.



Read The permission to obtain the object content and metadata.

Write The permission to write an object, that is, to overwrite and changethe object.

ACL View The permission to view the ACL of an object.An object owner has this permission.

ACL Edit The permission to modify the ACL of an object.An object owner has this permission.NOTE


Full Control The permission to control an object. A user assigned such apermission possesses all the permissions mentioned above.

Step 4 Optional: Click Add Permission. Enter a value for Domain ID of a specific user and setACL permissions for the user.

You can obtain Domain ID on the My Credential page.



78

If no ACL permission is assigned for a new object, OBS automatically disables the access tothe object by other users except the object owner.

For details about how to use ACL permissions, see section ACL in the Object StorageService API Reference.

Step 5 Click Save.

A message is displayed indicating a successful object permission setting.

----End

Follow-up Procedure

Click Delete to delete permissions of specific users when necessary. Click to collapsethe permission list.

4.3.6 Searching for a File or FolderThis section describes how to search for a file or folder by name prefix on OBS Console.

Procedure


Step 2 Select the bucket where the target object resides.

Step 3 Click Manage Objects.

Step 4 In the search box in the upper right corner on the Manage Objects page, enter the nameprefix of the desired file or folder.

Step 5 Click .

The found files or folders are displayed in the object list.

For example, if you want to search for files or folders whose name prefix is testobject inbucket mybucket, go to the Manage Objects page, enter testobject in the search box in the

upper right corner on the page, and click . All files or folders whose name prefix istestobject are displayed in the object list.

----End

4.3.7 Downloading a FileThis section describes how to download a file from OBS to a local computer.

Procedure


Step 2 Select the bucket from which you want to download files under My Buckets and clickManage Objects.



79



Step 3 Select the file that you want to download.

Step 4 Click Download or Download As, and proceed as prompted.

----End

4.3.8 Deleting a FileThis section describes how to delete a file.

Procedure


Step 2 Select the bucket from which you want to delete files under My Buckets and click ManageObjects.

Step 3 Select a file and click Delete.

You can select multiple files and click Delete in the middle of the page to batch delete thefiles.

Step 4 Click OK.

A message is displayed indicating that the file has been successfully deleted.

----End

4.3.9 Deleting a FolderThis section describes how to delete a folder.

Procedure


Step 2 Select the bucket from which you want to delete folders and click Manage Objects.


Step 3 Select the folder you want to delete.

Step 4 Click Delete.

Step 5 Click OK.

A message is displayed indicating that the folder is successfully deleted.

----End

4.4 Managing FragmentsFragment management enables you to clear fragments that were generated due to objectupload failures 90 days ago.

PrerequisitesOnly fragments generated 90 days ago can be deleted.



80

Context

The following lists examples of situations where fragments may be generated due to dataupload failures.




Procedure


Step 2 Select the bucket for which you want to configure fragment management under My Bucketsand click Manage Fragments.

Step 3 Select a fragment and click Delete on the right of the object.

You can also select multiple fragments and click Delete on the top of objects list to batchdelete them.

Step 4 Click OK.

A message is displayed indicating a successful fragment deletion.

----End

4.5 Typical ApplicationThis section describes how an enterprise uses OBS through OBS Console.

Prerequisites

OBS has been enabled.

Context

An enterprise is looking for solutions to meet its storage needs. The enterprise needs to store alarge number of files but does not want to purchase storage devices. Therefore, the enterpriseplans to use OBS to store the files.

The enterprise wants to control the read and write permissions for stored files and will notarchive the files after one-year storage.

Procedure

Step 1 Log in to OBS Console as an enterprise user.

Step 2 Create a bucket.

1. Click Create Bucket in the upper left corner.



81

2. Select Region.3. Enter Bucket Name.

Bucket Name must be globally unique.4. Click Save.

Step 3 Click Attribute on the right of the bucket.

Step 4 Configure the read and write permissions for the bucket.

1. Click Permission.2. Select Full Control, Read, and Write for the bucket owner.3. Click Save.

Step 5 Set a lifecycle rule.

1. Click Lifecycle Rule.2. Click Add.3. Configure a lifecycle management rule.

– Select Enable to enable the lifecycle rule.– Click For the entire bucket.– Click Current version and By day. Set 365 as the Expires in.

4. Click OK.

Step 6 Create a folder.

1. Select the created bucket on the left side of the page and click Manage Objects.2. Click Create Folder and enter a name for the folder.3. Click OK.

Step 7 Upload a file.

1. Click the created folder.2. Click the button on the left side of Upload to select the file you want to upload.3. Click Upload.

----End

Follow-up ProcedureTo view the content of a file stored on OBS, log in to OBS Console and download the file to alocal computer.



82

5 Using OBS Through OBS Browser

About This ChapterOBS Browser enables you to perform most basic operations.

5.1 Basic Operations on OBS Browser

5.2 Bucket Management

5.3 Object Management

5.4 Task Management

5.5 Example Scenario

Object Storage ServiceUser Guide 5 Using OBS Through OBS Browser


83

5.1 Basic Operations on OBS BrowserThis chapter describes basic operations on OBS Browser.

You can refresh the OBS Browser page that is currently displayed using the followingmethods:

l Click the icon in the upper right corner of the page.l Right-click the bucket or object list and choose Refresh from the shortcut menu.

5.1.1 OBS Browser OverviewThis section describes basic functions of OBS Browser.

OBS Browser is an object storage service client that runs on a Windows operating system. Itworks together with OBS and Amazon S3 storage, helping you manage object storage on yourpersonal computers.

The following table provides PC specifications required by OBS Browser.

Table 5-1 PC specifications required by OBS Browser

Item Specifications Remarks

Operatingsystem

l Windows XP Pro X64Edition

l Windows 7 Pro SP1 32-bitl Windows 7 Pro SP1 64-bitl Windows 8 Pro 32-bitl Windows 10 Pro 64-bitl Windows Server 2008 R2

standard SP1 64-bitl Windows Server 2012

standard SP1 64-bit

-

CPU l Minimum: 2-core 1.6 GHzCPU

l Standard: 2-core 2.4 GHzCPU

-

Memory l Minimum: 4 GBl Standard: 8 GBl Available memory: ≥ 512

MB

-

Availablespace of theinstallationCD-ROM

≥ 512 MB Disk space required for installing OBSBrowser



84

Item Specifications Remarks

Availablespace of thedata disk

≥ 3 GB Disk space required for storing datafiles in the database of OBS Browser(The data files are stored in the systemdisk in the current version.)

NOTICEWhen OBS Browser runs on a 32-bit operating system, the maximum database storage spaceis 2 GB. When the number of tasks in the task list is more than 1 million, OBS Browser maywork incorrectly. For a better experience, use a 64-bit operating system.

OBS Browser has a flattened GUI, which is friendly to Windows users. For a betterexperience, use devices with a display resolution of 1280 x 1024 or higher. OBS Browserdelivers the following functions:l Bucket creation, query, and deletionl Bucket permission control and bucket policiesl CORSl Access log managementl Lifecycle managementl Fragment managementl External bucket addingl Folder creation, upload, download, and deletionl File upload, download, query, and deletionl Management of upload, download, and deletion tasks

If you want to query the current version of OBS Browser, click the icon in the upperright corner and click About.

5.1.2 Installing OBS Browser

Procedure

Step 1 Download the OBS Browser software package.

1. In the browser, enter www.hwclouds.com/en-us to go to the enterprise cloud servicehomepage.



85


2. Click the area in the red box. The OBS details page is displayed.3. At the bottom of the page, click OBS Browser in the red box. The OBS Browser

download page is displayed.

4. Download the OBS Browser software package as instructed.


1. Double-click the OBS Browser installation file, for example, OBS Browser.exe.2. In the installation wizard, click Next.



86

3. Click Browse and select an installation path. Click Next.

4. Click Install to start installation.



87

5. Click Finish.

Step 3 Double-click the obs.exe file to start OBS Browser.

----End



88

Follow-up Procedure

By default, the OBS Browser page is automatically displayed after OBS Browser is installed.You can add your account to manage resources on OBS. Alternatively, you can close OBSBrowser and log in to OBS Browser to add your account when necessary.

5.1.3 Creating an Access Key (AK and SK)This section describes how to create an access key (AK and SK).

Context

OBS uses AKs and SKs for signature verification to ensure that only authorized accounts canaccess specific OBS resources.




Before logging in to OBS Browser, create your AK and SK on OBS Console.

Procedure


Step 2 In the upper right corner of the page, click the user name and choose My Credential.

Step 3 On the My Credential page, click Add Access Key below the Access Keys area.

Step 4 Enter the related information as prompted and save the newly created access key.



89

NOTE

To ensure access code security, store the access key safely. If you click Cancel in the Confirm dialog box,the access key will not be downloaded and cannot be downloaded later. In this case, you must delete theaccess key and create one later when necessary.

----End

Follow-up ProcedureIf an access key has a problem (for example, it is lost or leaked) or will be no longer used,click Delete to delete the access key or contact the administrator to reset the access key.

When deleting an access key, you must enter the login password and verification code. Adeleted access key cannot be restored.

5.1.4 Logging In to OBS BrowserThis section describes how to use OBS Browser to manage resources stored on OBS.

Procedure

Step 1 Double-click obs.exe to start it.

If you are starting OBS Browser for the first time, the Add Account page is automaticallydisplayed. Go directly to Step 4.



Step 4 In the Add Account dialog box, enter the account information and click OK.



90


l Account NameThe account name is used only to uniquely identify an account and can be different fromthe OBS account registered with the Huawei Enterprise Cloud. The account name cannotexceed 50 characters.






91

l AK and SK

Enter the AK and SK created in My Credential after you register with a storage service,such as OBS. For details about how to obtain an AK and SK, see section 5.1.3 Creatingan Access Key (AK and SK).


Information about the new account is displayed in the Manage Account dialog box.

Step 5 Click OK. You can log in to OBS Browser using the account and check bucket and objectresources owned by the account.

Step 6 Optional: To manage objects owned by multiple accounts on OBS Browser, click the accountname and Manage Account to add multiple accounts. You can click a desired account toswitch to the account.

----End

5.1.5 Configuring the SystemThis section describes how to modify system configurations.

Procedure


Step 2 In the upper right corner of OBS Browser, click the icon and click SystemConfiguration.



92

Step 3 In the System Configuration dialog box that is displayed, modify basic configurationparameters.

Table 5-2 describes the parameters that can be modified.

Table 5-2 OBS Browser general configurations


Enable HTTPS If this option is selected, all communication information isencrypted and transferred to OBS over HTTPS.

Enable KMS Encryption If Enable HTTPS and Enable KMS Encryption areselected, KMS encryption will be implemented for all objectsuploaded to OBS.

Multipart Upload, PartSize (MB)

Objects whose size is larger than the specified part size (5MB by default) are segmented and uploaded in the OBSbackground. The size of each segment can be set on this page.The value of Part Size (MB) can range from 5 MB to 5 GB.This item is selected by default.NOTE

Multipart upload is used by default. Recommended settings of PartSize (MB) are as follows:

To maximize client performance, set Part Size (MB) based on theupload speed. The optimal Part Size (MB) is larger than themaximum upload speed. For example, if the maximum upload speedis 10 MB/s, set Part Size (MB) to an integer greater than 10 MB. It isrecommended that the part size be set to a value two to three timesthe maximum upload speed.



93


Max Number of UploadTasks

Specifies the maximum number of upload tasks.

Max Number ofDownload Tasks

Specifies the maximum number of download tasks.

Language Selects the language of the display. Changes take effect afterthe software is restarted.

Step 4 Optional: Click Network and add proxy server information.

Table 5-3 OBS Browser network configurations


Enable proxy If selected, you will access OBS through the proxy server.l Address: domain name or IP address of the proxy serverl Port: port of the proxy server (default port is 8080)

Authentication If selected, you need to enter the user name and password whenconnecting the proxy server for authentication.l Username: login user name of the proxy server.l Password: login password of the proxy server.



94

Step 5 Optional: Click Other and add other configuration information.

Table 5-4 Other configurations of OBS Browser


Automatic Update Check If this option is selected, each time whenyou log in to OBS Browser, a check will beautomatically performed to determinewhether the current software version is thelatest.

Join in the user experience improvementproject

Before selecting Join in the userexperience improvement project, clickView details and carefully read Userexperience improvement project.

Object Count on Each Page Sets the number of objects that aredisplayed on each page. The default value is100. The value ranges from 50 to 300. After

setting the value, click the button inthe upper right corner of the page so that thesetting takes effect.

Task Count in Task List Sets the number of tasks that are displayedin the task list. The default value is 100. Thevalue ranges from 50 to 150. After setting

the value, click the button in the upperright corner of the page so that the settingtakes effect.NOTE

Tasks in the task list are displayed on only onepage. If the actual tasks exceeds the number youset to display, the exceeding tasks are notdisplayed in the task list. However, the task listupdates in real time to display unfinished tasks.



95

Step 6 Click Save to save the system configuration.

----End

5.1.6 Managing AccountsThis section describes how to manage multiple accounts on OBS Browser.

Add an Account




Step 4 In the Add Account dialog box, enter the account information.


l Account Name



96

The account name is used only to uniquely identify an account and can be different fromthe OBS account registered with the Huawei Enterprise Cloud. The account name cannotexceed 50 characters.




l AK and SKEnter the AK and SK created in My Credential after you register with a storage service,such as OBS. For details about how to obtain an AK and SK, see section 5.1.3 Creatingan Access Key (AK and SK).


Step 5 Click OK.

After OBS Browser is successfully connected to the storage service, all buckets and objectsmapping to the current login account are displayed.

----End

Modifying an Account



Step 3 Click Edit in the row where the desired account resides.

Step 4 Modify the account information as required.

Step 5 Click OK to save the modification.

----End



97

Deleting an Account



Step 3 Click Delete in the row where the desired account resides.

Step 4 Click OK and the account is deleted.

----End

5.1.7 Updating OBS BrowserThis section describes how to update OBS Browser.

Procedure


Step 2 In the upper right area, click . Then click Check for Update.

Step 3 Update the OBS Browser version as instructed.

Click on OBS Browser. Then click Check for Update. If It is already the latestversion is displayed, the upgrade is successful.

----End



98

5.1.8 FeedbackThis section describes how to feed back your comments or suggestions on OBS using OBSBrowser.

ContextStatistics on user comments and suggestions as well as function usage must be collected andanalyzed to continuously improve operation experience and product performance, boostingcustomer satisfaction.

Procedure


Step 2 In the upper right corner of OBS Browser, click . Then click Feedback.

Step 3 In the dialog box that is displayed, enter the problems that you encounter and suggestions,your email address, and phone number.

Your contact information is used for us to reach you quickly. Your personal data will beanonymized, encrypted, and sent to our company for us to improve our products and services.The data will neither be disclosed or shared, nor be used for other products. You can capturescreenshots of problems you encounter during OBS Browser usage and send them to us.

----End



99

5.2 Bucket ManagementThis chapter describes a series of bucket management operations.

OBS Browser supports three methods of bucket management. This document takes the firstmethod as an example to describe bucket management operations.

l Click the blank area in the row where the bucket to be managed resides. You can managethe bucket using the buttons displayed above the bucket list.

l Click the operation buttons in the row of the bucket to be managed.

l Right-click the blank area in the row where the bucket to be managed resides. A shortcutmenu is displayed for managing the bucket.



100


Procedure


Step 2 In the upper left corner on the page, click Create Bucket.

Step 3 In the Create Bucket dialog box that is displayed, enter a value for Bucket Name select aRegion from the drop-down list and click OK.

NOTE

If OBS Storage is selected when you log in to OBS Browser, the region information will be generatedautomatically and you do not need to enter the region information manually.

You can move the pointer over the icon behind the bucket name text box to view thenaming rules for a bucket. A user can create a maximum of 100 buckets on OBS.



l Cannot be an IP address.l Cannot start or end with a hyphen (-) or period (.).l Cannot contain two consecutive periods (.).



101

l Cannot contain periods (.) and hyphens (-) adjacent to each other.

NOTE


Region information can be configured on OBS Browser. The following details theconfiguration procedure:

1. Decompress the OBS Browser software package to the local client.

2. Open file region in folder OBS Browser in the installation path of OBS Browser.

3. Change the value of parameter options in file region.

Enter the region information to be added to the end of parameter options in thefollowing format:{"key":"Region alias","value":"Region"}

The newly added information must be in the JSON format. The following table describesthe parameters.

– key indicates a user-defined region alias. Its value is in the Region drop-down listin the Create Bucket dialog box. For a convenient view, you are advised to enterno more than 25 characters.

– value indicates Region. Enter its value based on Region supported by OBS.

For details about the value of Region information supported by OBS currently, see3.1 Accessing OBS Using Domain Names.

Each time when a Region is added, a group of values will be added to options, thatis, {"key":"Region alias","value":"Region"}. Groups of values are separated bycommas (,). The following provides two configuration examples of newly addedregion01 and region02. Keep the values of other parameters in file regionunchanged."options":[{"key":"cn-north-1","value":"cn-north-1"},{"key":"region01_test","value":"region01"},{"key":"region02_test","value":"region02"}]

4. After file region is successfully modified, restart OBS Browser so that theconfigurations can take effect.

Step 4 In the dialog box that is displayed, click OK.



102

NOTE


----End

5.2.2 Searching for a BucketThis section describes how to search for a bucket by entering characters contained in its nameon OBS Browser.

Procedure


Step 2 In the search box in the upper right corner on the main page, enter characters contained in thename of the desired bucket.

Step 3 Click .

The found buckets are displayed in the bucket list. If you want to search for other buckets,

click the icon in the search box to delete the keyword and enter the characters containedin the names of the buckets for which you want to search.

If the object list is displayed and you want to quickly switch to another bucket, you can click

the icon on the left to expand the bucket list and then enter the bucket name in the searchbox above the bucket list.

For example, if you want to search for buckets whose names contain the test characters, youonly need to enter test in the search box in the upper right corner on the main page and click

. Then, all buckets that contain test in their names are displayed in the bucket list.

----End

5.2.3 Viewing Basic Information About a BucketThis section describes how to view basic information about a bucket, including the owner,capacity, location, and object quantity using OBS Browser.

Procedure


Step 2 Click the blank area in the row of the bucket about which you want to query the basicinformation and click Basic.

Step 3 On the Basic page that is displayed, view basic information about the bucket.



103



Owner Owner of the bucket.

Space Used Total used capacity of the objects in the bucket.

Number of Objects Number of the objects stored in the bucket.

Region Region where the bucket is stored.

Domain ID Unique identity of the bucket owner. It is the same as Domain IDon the My Credential page.

Created Time when the creation of a bucket is completed.

----End

5.2.4 Setting ACL Permissions for BucketsThis section describes how to modify ACL permissions for a bucket.

Procedure


Step 2 Click the blank area in the row of the bucket for which you want to set ACL permissions andclick Configure Permission.

Step 3 Set ACL permissions for the bucket and click Save.



104

OBS enables bucket access permissions to be assigned to four types of authorized users usingthe ACL, as listed in Table 5-6.





Anonymous User A user that is not registered with OBS. The access permission for abucket and objects can be assigned to anonymous users. If thepermission is assigned, all users can access the bucket and objects.

Log Delivery User A user that is used to deliver bucket access logs. The user isconfigured for bucket log management.

OBS supports five types of bucket access permissions, as listed in Table 5-7.



Read The permission to obtain the list of objects in the bucket and themetadata of the bucket.

Write The permission to write a bucket. A user with the write permissionfor a bucket can upload, overwrite, and delete any object in thebucket.

ACL View The permission to view the ACL of a bucket.A bucket owner has this permission.



105


ACL Edit The permission to modify the ACL of a bucket.A bucket owner has this permission.NOTE


Full Control The permission to control a bucket and objects in the bucket. Auser assigned such a permission possesses all the permissionsmentioned above.


For details about how to use ACL permissions, see section ACL in the Object StorageService API Reference.

----End

5.2.5 Configuring a Bucket PolicyA bucket policy defines the access control policy of resources (buckets and objects) on OBS.This section describes how to configure a bucket policy using OBS Browser.

Context

Access requests to a bucket are controlled by bucket policies. The bucket policy controlsaccess requests by accepting or rejecting the requests.

Procedure


Step 2 Click the blank area in the row of the bucket for which you want to configure a bucket policyand choose More > Configure Bucket Policy.

Step 3 In Configure Bucket Policy, enter a bucket policy. The following are two examples of bucketpolicy configurations.



106















107



You can click Learn More to view details on the bucket policy.

Table 5-8 describes parameters in bucket policies. For details about OBS bucket policies, seesection Bucket Policy in the Object Storage Service API Reference.










108






Step 4 Click Save.

----End



l Limiting specific addresses' permission to access specific buckets.In the following example, the permission of address www.example.com to access allobjects in bucket mybucket is limited.{"Version":"2008-10-17","Statement":[{"Sid":"1","Effect":"Deny","Principal":{"CanonicalUser":["*"]},"Action":["s3:*"],"Resource":["arn:aws:s3:::mybucket/*"],"Condition": {"StringEquals":{"aws:Referer":["www.example.com"]}



109

}}]}


l Limiting the start time of accessing objects in a bucket.In the following example, the start time of accessing all objects in bucket mybucket byall users is limited.{"Version":"2008-10-17","Statement":[{"Sid":"1","Effect":"Allow","Principal":{"CanonicalUser":["*"]},"Action":["s3:*"],"Resource":["arn:aws:s3:::mybucket/*"],"Condition":{"DateGreaterThan":{"aws:CurrentTime":"2015-09-10T12:00:00Z"},"DateLessThan":{"aws:CurrentTime":"2015-09-10T15:00:00Z"}}}]}

5.2.6 Configuring CORSThis section describes how to use CORS in HTML5 to implement cross-origin access.

Procedure


Step 2 Click the blank area in the row of the bucket for which you want to configure CORS andchoose More > Configure CORS Rule.



110

Step 3 Click Add.

NOTE

You can set a maximum of 100 CORS rules for OBS.

Step 4 In the Add CORS Rule dialog box that is displayed, enter CORS rules.

Table 5-9 describes parameters in CORS rules.










111

Step 5 Click OK. The Configure CORS Rule dialog box is displayed.

Step 6 Click OK to save the rules.

----End

Follow-up Procedure

New rules are displayed in Configure CORS Rule. You can select a rule and modify ordelete it.

5.2.7 Configuring LoggingAfter logging is enabled for a bucket, OBS automatically converts bucket logs into objectsfollowing the naming rules and writes the objects into a specific bucket.

Prerequisites

The log delivery user group has been assigned the write permission (WRITE) and ACL viewpermission (READ_ACP) for the target bucket.

Procedure


Step 2 Click the blank area in the row of the bucket for which you want to configure logging andchoose More > Configure Log Function.



112

Step 3 Choose Enable, select Target Bucket, and enter Target Prefix. Then click Save.

Target Bucket indicates the bucket storing logs. Target Prefix indicates the prefix of a logfile name.

After logging is enabled, generated logs are named using the following format:


l <TargetPrefix> indicates the specific target prefix.

l YYYY-mm-DD-HH-MM-SS indicates the date and time when the log is generated.

l <UniqueString> indicates a character string generated by OBS.

On OBS Browser, if configured <TargetPrefix> ends with a slash (/), logs generated in thebucket are stored in the <TargetPrefix> folder in the target bucket to facilitate management.

For example:



----End



113

5.2.8 Configuring a Lifecycle Management PolicyThis section describes how to define lifecycle management rules for a bucket so that the rulescan take effect on objects in the bucket.

ContextLifecycle management means periodically deleting objects in a bucket by configuring rules.Lifecycle management applies to the following scenarios:



For details about how to configure lifecycle management, see PUT Bucket lifecycle in theObject Storage Service API Reference.

Procedure


Step 2 Click the blank area in the row of the bucket for which you want to configure a lifecyclemanagement policy and choose More > Configure Lifecycle Rule.

Step 3 In the Configure Lifecycle Rule dialog box, click Add.

Step 4 Set Status to Enable, configure required parameters, and click Save.l Status

Select Enable to enable the lifecycle rule.l Policy

Match lifecycle rules with the prefixes of object names so that objects with such nameprefixes can be restricted by the lifecycle rules. You can also configure a lifecycle rulefor a bucket so that all objects in the bucket can be restricted by the lifecycle rule.

NOTE

l When By Prefix is selected and the specified prefix and the prefix of an existing lifecycle rule overlap,OBS regards the two rules as one and disables your rule. For example, if a rule with prefix abc exists inthe system, another rule whose prefix contains abc cannot be configured.

l If a lifecycle rule whose Policy is set to By prefix has been configured, you cannot configure a lifecyclerule whose Policy is set to For the entire bucket.

l If a lifecycle rule whose Policy is set to For the entire bucket has been configured, you cannot configurea lifecycle rule whose Policy is set to By prefix. The Add button becomes unavailable.



114


l Expiration Time– By day specifies the number of days after which an object is automatically deleted.– By date specifies the day after which objects that match with a rule are deleted.

l Rule Name identifies lifecycle rules. The Rule Name contains a maximum of 255characters.


l log/test1.logl log/test2.logl doc/example.docl doc/good.txt

The following files are stored on OBS on January 10, 2015:

l log/clientlog.logl log/serverlog.logl doc/work.docl doc/travel.txtl If the expiration time of objects prefixed with log/ is set to January 11, 2015 (or one day

later) on January 10, 2015, OBS will delete objects log/test1.log, log/test2.log, log/clientlog.log, and log/serverlog.log on January 11, 2015.

l If the expiration time of objects prefixed with log/ is set to January 8, 2015 on January10, 2015, OBS will delete objects log/test1.log and log/test2.log that were last modifiedbefore January 8, 2015 on January 10, 2015 but will not delete objects log/clientlog.logand log/serverlog.log that were stored on OBS the same day.

NOTE


Step 5 In the Add Lifecycle Rule dialog box, click Save to save the lifecycle rule.

----End



115

Follow-up ProcedureYou can click Edit or Delete to edit or delete a configured lifecycle rule.

5.2.9 Managing FragmentsFragment management enables you to clear fragments that were generated due to objectupload failures 90 days ago.

PrerequisitesOnly fragments generated 90 days ago can be deleted.

ContextThe following lists examples of situations where fragments may be generated due to dataupload failures.




Procedure


Step 2 Click the blank area in the row of the bucket and choose More > Manage Fragments.

Step 3 In the Manage Fragments dialog box, select a fragment and click Clear.

You can hold down Ctrl to select multiple segments and click Clear to delete all thefragments. Click Check to refresh the fragment list.

Step 4 In the Warning dialog box that is displayed, confirm task upload information and click OK.

Step 5 Click OK.

The Manage Fragments dialog box is displayed. You can close the dialog box to return tothe OBS Browser home page.

----End



116

5.2.10 Adding External BucketsOBS enables you to use the external bucket adding function to add buckets of other users ifyou have access permission for the buckets. By doing so, you can access the external bucketslocally using your account.

PrerequisitesThe current account has been assigned the ACL permission to access the buckets of otherusers.

For example, account A needs to add bucket bucket_share of account B to itself so thataccount A can read objects stored in bucket bucket_share. Account B needs to obtainDomain ID of account A and set the Read permission on bucket bucket_share for account Ausing OBS Console.

Account A logs in to OBS Console, clicks the username in the upper right corner on the page,selects My Credential, and obtains Domain ID on the page that is displayed.

For details about how account B sets permissions for account A, see relevant descriptions ofhow to set ACL permissions for a specific user in section 4.2.4 Setting ACL Permissions forBuckets.

If account B has set the Read permission on bucket bucket_share for Registered User, allregistered users can add bucket bucket_share. For details about how to set permissions forRegistered User, see section 5.2.4 Setting ACL Permissions for Buckets or section 4.2.4Setting ACL Permissions for Buckets.

NOTE

Currently, you can only use OBS Console to set ACL permissions for a specific user. However, you canuse both OBS Console and OBS Browser to set ACL permissions for Registered User.

ContextIf a user has been assigned the ACL permission to access the buckets of other users, the usercan leverage external bucket adding to access the external buckets locally using its ownaccount.

Procedure


Step 2 Click the blank area in the row of the bucket and choose More > Add External Bucket.

Alternatively, right-click the blank area in the bucket list and choose Add External Bucketfrom the shortcut menu.



117

Step 3 In the Add External Bucket dialog box that is displayed, enter the name of the externalbucket to be added and click OK.



l Cannot be an IP address.l Cannot start or end with a hyphen (-) or period (.).l Cannot contain two consecutive periods (.).l Cannot contain periods (.) and hyphens (-) adjacent to each other.

After successfully adding an external bucket, you can see the external bucket in the bucket listand have the ACL access permission for the bucket.

----End

ExampleIf you are assigned the Write and Read permission for bucket test, you can leverage externalbucket adding to add bucket test to a local computer using your account. You can see buckettest in the bucket list on the left and have the write permission for the bucket. That is, you canupload objects to, overwrite objects in, and delete objects from the bucket.


Prerequisitesl The bucket to be deleted is empty.l Only the bucket owner can delete a bucket.

Procedure


Step 2 In the bucket list, click the blank area in the row of a bucket and click Delete.

NOTE

l Before deleting a bucket, ensure that all objects in the bucket have been deleted and no multipart uploadtasks are running in the bucket.


Step 3 Click OK.

----End

5.3 Object ManagementOn OBS, operations are performed based on objects. This chapter describes a series of objectmanagement operations.



118



Right-click the blank area in the object list and a shortcut menu is displayed. You can chooseUpload File, Upload Folder, or Create Folder to manage objects.

OBS Browser supports three methods of object management. This document takes the firstmethod as an example to describe object management operations.

l Click the blank area in the row where the object to be managed resides. You can managethe object using the buttons displayed above the object list.

l Click the operation buttons in the row of the object to be managed.

l Right-click the blank area in the row where the object to be managed resides. A shortcutmenu is displayed for managing the object.

5.3.1 Creating a FolderThis section describes how to create a folder using OBS Browser.

Context

There are no files or folders on OBS. For easy data management, OBS provides a method tosimulate folders. On OBS, an object is simulated as a folder by adding a slash (/) to the objectname on OBS Browser.

Procedure


Step 2 Click the bucket. Click Create Folder.

Step 3 In the dialog box that is displayed, enter a folder name and click OK.



119

l The folder name cannot contain special characters, such as < > ? | / : \ * "l The folder name cannot start or end with a period (.).l The folder name cannot exceed 1023 bytes. The length of a folder name is the sum of the


NOTE

If an access denial message is displayed when you are creating a folder, the possible causes are as follows:l The access permission for the bucket is restricted by the ACL. For example, the user has no write

permission for the bucket.l The access permission for the bucket is restricted by the bucket policy. For example, the user is forbidden

to write data to the bucket during the current period of time, the user has no write permission for thebucket, or server-side encryption is not enabled on OBS Browser, which is against the bucket policy.


Step 4 Click OK.

----End

5.3.2 Object URLThe object uniform resource locator (URL) (object sharing) function allows anonymous usersto access object data using object URLs.

PrerequisitesAssign an anonymous user the permission to read the specified object using OBS Console.For details about how to set ACL permissions, see 4.3.5 Setting ACL Permissions forObjects.

Procedure


Step 2 Click the bucket for which you want to configure the object URL function, and click the

icon next to the object to be shared to view the object URL.

l If you select S3 Compatible Storage when logging in to OBS Browser, the object URLis in the format of https://storage server IP address or domain name/bucket name/directory level/object name, for example, https://192.168.100.10/testbucket/test/



120

testobject.txt. If the object is in the root directory of the bucket, the URL does notcontain a directory level.

l If you select OBS when logging in to OBS Browser, the object URL is in the format ofhttps://bucket name.domain name/directory level/object name, for example, https://testbucket.obs.cn-north-1.myhwclouds.com/test/testobject.txt. If the object is in the rootdirectory of the bucket, the URL does not contain a directory level.

Step 3 Click Copy to copy the object URL to the browser. Then you can access the object.

NOTE

The browser-based object access method varies depending on the object type. You can directly open .txtand .html files using a browser. However, when you open .exe and .dat files using a browser, the files areautomatically downloaded to your local computer.

----End

5.3.3 Searching for a File or FolderThis section describes how to search for a file or folder by name prefix on OBS Browser.

Procedure


Step 2 Click the bucket where the target file or folder resides.

Step 3 In the search box in the upper right corner on the object management page that is displayed,enter the name prefix of the desired file or folder.

Step 4 Click .

The found files or folders are displayed in the object list. If you want to search for other files

or folders, click the icon in the search box to delete the keyword and enter the characterscontained in the names of the files or folders for which you want to search.

For example, if you want to search for files or folders whose name prefix is testobject inbucket mybucket, go to the object management page, enter testobject in the search box in the

upper right corner on the page, and click . All files or folders whose name prefix istestobject are displayed in the object list.

----End

5.3.4 Uploading a File or FolderThis section describes how to upload local files or folders to OBS for storage.

ContextOBS Browser supports multipart upload. You can upload a single file up to 48.8 TB (equal to10,000 x 5 GB) in size.

The file or folder name cannot exceed 1023 bytes. The length of a file or folder name is thesum of the length of its own and the length of its upper-level directories, and cannot exceed1023 bytes. Levels of directories are automatically separated by slashes (/). For example, if



121

the upper-level directory of file01 is folder01, the file name length is calculated based onfolder01/file01.

Procedure


Step 2 Click the bucket to which you want to upload files or folders.

Step 3 Click Upload. Then click Upload File or Upload Folder.

If you have enabled the Upload File function, it is a good practice to upload a maximum of100 files at a time for better user experience. If you need to upload more files, place the filesin a folder and use the Upload Folder function to upload the folder.

NOTE


2. If an access denial message is displayed when you are uploading a file or folder, the possible causes are asfollows:




Step 4 In the dialog box that is displayed, select the file or folder that you want to upload and clickOpen.

You can upload a folder or multiple files at a time. To upload multiple files, hold down Ctrlor Shift to select multiple files. You can also select all the files on the current page by holdingdown Ctrl+A. The operations are consistent with those on the Windows operating system.

The file or folder upload progress is displayed on the task management page. You cansuspend, run, or cancel an upload task based on site requirements. For details, see 5.4.1Managing Upload Tasks.

----End

5.3.5 Uploading a File with Server-Side EncryptionOBS allows users to encrypt objects using server-side encryption so that the objects can besecurely stored on OBS.

Context

After server-side encryption is enabled, when uploading objects, data will be encrypted andstored on the server. When downloading the encrypted objects, the encrypted data will bedecrypted on the server and displayed in plaintext to users.

KMS is used to encrypt the objects to be uploaded.



122

Procedure


Step 2 In the upper right corner on the page, click .

Step 3 Click System Configuration > General.

Step 4 Select Enable HTTPS and Enable KMS encryption.

After you select Enable HTTPS and Enable KMS encryption, KMS encryption will be

implemented for all objects uploaded to OBS. After objects are uploaded, click the icon on the right side of the object list. On the Properties dialog box that is displayed, viewthe object encryption status. Encryption indicates that server-side encryption has beenimplemented for the object. No indicates that server-side encryption has not beenimplemented for the object. The object encryption status cannot be changed.

NOTE

Server-side encryption does not support HTTP. To use server-side encryption, enable HTTPS.

----End



123

5.3.6 Downloading a File or FolderThis section describes how to download a file or folder from OBS to a local computer.

Procedure


Step 2 Click the bucket. Then select a file or folder and click Download.

You can hold down Ctrl or Shift to select files or folders and batch download them. You canalso select all the files or folders on the current page by pressing Ctrl+A. The operations areconsistent with those on the Windows operating system.

Step 3 In the dialog box that is displayed, select save location and click OK.

The file or folder download progress is displayed on the task management page. You cansuspend or cancel a download task based on site requirements. For details, see section 5.4.2Managing Download Tasks.

----End

5.3.7 Deleting a File or FolderThis section describes how to delete a file or folder.

Context

Deleting a folder will delete all files in the folder. Ensure that all files in a folder can bedeleted before deleting the folder.

Procedure


Step 2 Click the bucket. Then select a file or folder and click Delete.

You can hold down Ctrl or Shift to select multiple files or folders and batch delete them. Youcan also select all the files or folders on the current page by pressing Ctrl+A. The operationsare consistent with those on the Windows operating system.

Step 3 Click OK.

The file or folder deletion progress is displayed on the task management page. You cansuspend or cancel a deletion task based on site requirements. For details, see section 5.4.3Managing Deletion Tasks.

----End

5.4 Task ManagementOBS supports concurrent file or folder uploads or downloads. Using OBS Browser, you caneasily manage the upload, deletion or download tasks.



124

5.4.1 Managing Upload TasksThis section describes how to manage upload tasks using OBS Browser.

Prerequisites

Ensure that at least one upload task is ongoing or at least one upload failure exists.

Context

An upload task may be suspended or canceled, or an upload failure may occur when data isbeing uploaded to OBS. You can use upload task management to manage upload tasks.

Procedure


Step 2 Click the bucket and click Upload. Then select the file or folder that you want to upload.


Step 4 On the Manage Tasks page, click Upload.

The list of upload tasks is displayed on the right. Multiple tasks can be managed at a time.You can hold down Ctrl or Shift to select multiple tasks and manage them. You can alsoselect all the files on the current page by holding down Ctrl+A. The operations are consistentwith those on the Windows operating system.

Upload failures may be caused by various reasons. To view upload failures, choose All >Failed. You can select a failed upload task and click Run to perform the task again.

Alternatively, you can move the mouse pointer over the icon in the Status column of thefailed upload task to view the reasons.

Step 5 Optional: Select an ongoing upload task and click Suspend to suspend the task.Alternatively, you can click Suspend All to suspend all tasks.

Select a suspended upload task and click Run to resume the task. Alternatively, you can clickRun All to resume all suspended tasks.

Step 6 Optional: Select an ongoing upload task and click Cancel to cancel the task. Alternatively,you can click Cancel All to delete all tasks.

----End



125

5.4.2 Managing Download TasksThis section describes how to manage download tasks using OBS Browser.

Prerequisites

At least one download task is running.

Procedure


Step 2 Click the bucket. Then select an object and click Download.


Step 4 On the Manage Tasks page, click Download.

The list of download tasks is displayed on the right. Multiple tasks can be managed at a time.You can hold down Ctrl or Shift to select multiple tasks and manage them. You can alsoselect all the files on the current page by holding down Ctrl+A. The operations are consistentwith those on the Windows operating system.

Download failures may be caused by various reasons. To view download failures, choose All> Failed. You can select a failed download task and click Run to perform the task again.

Alternatively, you can move the mouse pointer over the icon in the Status column of thefailed download task to view the reasons.

Step 5 Optional: Select an ongoing download task and click Suspend to suspend the task.Alternatively, you can click Suspend All to suspend all tasks.

Step 6 Select a suspended download task and click Run to resume the task. Alternatively, you canclick Run All to resume all suspended tasks.

Step 7 Optional: Select an ongoing download task and click Cancel to cancel the task. Alternatively,you can click Cancel All to delete all tasks.

----End

5.4.3 Managing Deletion TasksThis section describes how to manage deletion tasks using OBS Browser.



126

Prerequisites

At least one deletion task is running.

Procedure


Step 2 Click the bucket. Then select an object and click Delete.


Step 4 On the Manage Tasks page, click Delete.

The list of deletion tasks is displayed on the right. Multiple tasks can be managed at a time.You can hold down Ctrl or Shift to select multiple tasks and manage them. You can alsoselect all the files on the current page by holding down Ctrl+A. The operations are consistentwith those on the Windows operating system.

Deletion failures may be caused by various reasons. To view deletion failures, choose All >Failed. You can select a failed deletion task and click Run to perform the task again.

Alternatively, you can move the mouse pointer over the icon in the Status column of thefailed deletion task to view the reasons.

Step 5 Optional: Select an ongoing deletion task and click Suspend to suspend the task.Alternatively, you can click Suspend All to suspend all tasks.

Step 6 Select a suspended deletion task and click Run to resume the task. Alternatively, you canclick Run All to resume all suspended tasks.

Step 7 Optional: Select an ongoing deletion task and click Cancel to cancel the task. Alternatively,you can click Cancel All to delete all tasks.

----End

5.5 Example ScenarioThis section describes how a user uses OBS through OBS Browser.

Prerequisites

OBS has been enabled.



127

ContextA user is a film lover and has a large number of videos to be stored. However, this user's diskcannot be expanded in real time. For this reason, the user hopes to use OBS to store videos.

The user needs personal data to be isolated and protected from that of other users andresumable data transfer to be available during the upload of large files.

Procedure


Step 2 In the Add Account dialog box, enter required information to create an account upon theinitial start of OBS Browser.

Step 3 Click Create to create a bucket for storing data.

Step 4 Select the bucket you want to manage.

Step 5 Click the created bucket.

Step 6 Click Create Folder to create a folder.

Step 7 Click Upload to upload a file or folder.

Step 8 Click Manage Task.

Step 9 Click Suspend, Run or Cancel to manage the file being uploaded.

----End

Follow-up ProcedureTo obtain files stored on OBS, you can start OBS Browser and download the files to a localcomputer.



128

6 Troubleshooting

About This ChapterThis chapter describes how to troubleshoot OBS Browser and OBS Console.

6.1 Troubleshooting About OBS Browser

6.2 Troubleshooting About OBS Console

Object Storage ServiceUser Guide 6 Troubleshooting


129

6.1 Troubleshooting About OBS Browser

6.1.1 Objects Cannot Be Globally Searched for in a Bucket

Question

Why can objects not be globally searched for in a bucket?

Answer

OBS Browser does not support iterative query of objects in a bucket but supports query ofobjects in a directory only. If you want to search for an object, go to the directory where theobject resides and search for the object.

For example, if the root directory of bucket abc contains folder A and object B and folder Acontains object C, object C cannot be searched for in the root directory of bucket abc. It canbe searched for only in folder A.

6.1.2 Object URL Cannot Be Opened Using a Browser

Question

Why can an object URL not be opened using a browser?

Answer

If the Bucket Policy rules forbid the user from accessing the object or Read is not assigned toAnonymous user in the ACL of the object, the user cannot open the object URL using abrowser.

If Read for an object is assigned to Anonymous user but the Bucket Policy rules forbid theuser from accessing the object, the user cannot open the object URL using a browser becausethe priority of Bucket Policy is higher than that of the ACL.

You can solve this problem as follows: (Perform Step 1 to Step 2 to check whether theBucket Policy rules forbid the user from accessing the object. Perform Step 3 to Step 7 toassign Anonymous user Read for the object.)


Step 2 Choose More > Configure Bucket Policy and check whether the Bucket Policy rules forbidthe user from accessing the object. If yes, delete the Bucket Policy rules and try again.


Step 4 Select the object and click the arrow in front of the object name.


Step 6 Select Read behind Anonymous user.



130

Step 7 Click Save.

----End

6.1.3 No Upload Task Is Created After a Large Number of FilesAre Selected for Upload Using OBS Browser

QuestionWhy is no upload task created and nothing displayed on the page after a large number of filesare selected for upload using OBS Browser? For example, after a user logs in to OBSBrowser and chooses Upload > Upload File to select a large number of files from drive C forupload, no upload task is created and nothing is displayed on the page.

AnswerThe Upload File function of OBS Browser allows 100 files to be uploaded at the same time.If more files need to be uploaded, place the files in a folder and use the Upload Folderfunction to upload the folder.

Also, the total name length of all files to be uploaded cannot exceed approximately 25,500characters. If the name length exceeds this threshold, the system stops responding to theupload request.

6.1.4 Blue or Black Screen of Death Occurs When Files AreUploaded Using OBS Browser

QuestionWhy does blue or black screen of death occur when files are uploaded using OBS Browser?

AnswerWhen OBS Browser is used to upload a large number of files or a few of big files, most of thememory is used. Check whether the available memory space of the PC is greater than or equal



131

to 512 MB. If the available memory space of the PC is smaller than 512 MB, close someapplication programs to release the memory, or add new memory or virtual memory to the PC.

If the problem persists after memory is added, collect dump files based on the followingprocedure, and contact customer service personnel for locating and solving this problem.

Step 1 Right-click Computer and choose Properties from the shortcut menu. In the dialog box thatis displayed, click the Advanced tab. On the Advanced tab, click Settings. In the dialog boxthat is displayed, view the path under Dump file.

The following figure shows a screenshot of the Windows 7 Pro SP1 64-bit operating system,which is used as an example.

Step 2 Go to the path, copy and compress all files of which the extension is .dump, and send thecompressed package to customer service personnel for locating and solving this problem.

----End

6.2 Troubleshooting About OBS Console

6.2.1 Object URL Cannot Be Opened Using a Browser

QuestionWhy cannot an object URL be opened using a browser?



132

Answer

If the Bucket Policy rules forbid the user from accessing the object or Read is not assigned toAnonymous user in the ACL of the object, the user cannot open the object URL using abrowser.

If Read for an object is assigned to Anonymous user but the Bucket Policy rules forbid theuser from accessing the object, the user cannot open the object URL using a browser becausethe priority of Bucket Policy is higher than that of the ACL.

You can solve this problem as follows: (Perform Step 1 to Step 5 to assign Anonymous userRead for the object. Perform Step 6 to Step 7 to check whether the Bucket Policy rulesforbid the user from accessing the object.)


Step 2 Select the object and click the arrow in front of the object name.


Step 4 Select Read behind Anonymous user.

Step 5 Click Save.


Step 7 Choose Manage Bucket Attributes > Permission > Configure Bucket Policy and checkwhether the Policy rules forbid the user from accessing the object. If yes, delete the BucketPolicy rules and try again.

----End

6.2.2 Objects Cannot Be Globally Searched for in a Bucket

Question

Why cannot objects be globally searched for in a bucket?



133

AnswerOBS Console does not support iterative query of objects in a bucket but supports query ofobjects in a directory only. If you want to search for an object, go to the directory where theobject resides and search for the object.

For example, if the root directory of bucket abc contains folder A and object B and folder Acontains object C, object C cannot be searched for in the root directory of bucket abc. It canbe searched for only in folder A.

6.2.3 An Object Fails to Be Downloaded Using Internet Explorer11

QuestionA user logs in to OBS Console using Internet Explorer 11 and uploads an object. When theuser attempts to download the object to the original path to replace the original object withoutclosing the browser, a message is displayed indicating a download failure. Why is this?

For example, a user uploads object abc from the root directory of local drive C to a bucket onOBS Console. When the user attempts to download the object to the root directory of localdrive C to replace the original object without closing the browser, a message is displayedindicating a download failure.

AnswerThis problem is caused by browser incompatibility. It can be solved by using Google Chromeas browser.

If this problem occurs, close the browser and try again.

6.2.4 OBS Console Cannot Be Opened Using Internet Explorer 9

QuestionWhen the address of OBS Console can be pinged, why can OBS Console not be opened usingInternet Explorer 9?

AnswerCheck whether Use SSL and Use TLS are selected in Internet Options. If not, perform thefollowing procedure and try again:

Step 1 Open Internet Explorer 9.

Step 2 Click Tools in the upper right corner and choose Internet Options > Advanced. Then selectUse SSL 2.0, Use SSL 3.0, Use TLS 1.0, Use TLS 1.1, and Use TLS 1.2.



134

Step 3 Click OK.

----End

6.2.5 The Object Name Changes After an Object with a LongName Is Downloaded to a Local Computer

Question

After an object with a long name is downloaded to a local computer using OBS Console, whydoes the object name change?

Answer

For Windows, a file name, including the file name extension, can contain a maximum of 255characters. When an object with a name containing more than 255 characters is downloadedto a local computer, the system automatically discards any part of the name after the first 255characters.



135

7 Using OBS SDKs

OBS SDKs enable you to use SDK APIs to invoke massive storage resources for data access,freeing you from complex underlying storage technologies, storage capacity planning, andcapacity expansion and reduction.

When developing applications based on OBS, you can use Huawei OBS SDKs. The SDKscontain underlying REST APIs and apply to multiple programming languages, includingJava, .Net, Android, Python, C++, Ruby, and PHP.

Log in to Huawei Enterprise Cloud website and download the desired SDK from OBS helparea.

Object Storage ServiceUser Guide 7 Using OBS SDKs


136

http://developer.hwclouds.com/en-us

8 Obtaining More Resources

This chapter describes how to obtain OBS-related resources.

You can online query and download software and documents related to OBS from HuaweiEnterprise Cloud Website and Help Center.

Resources described in Table 8-1 can help you better understand and use OBS.

Table 8-1 OBS-related resources

Resource Description

Object Storage ServiceUser Guide

Describes basic functions and concepts of OBS and providesbasic quick start operations.

Object Storage ServiceClient Operation Guide

Explains how to use OBS Browser to manage buckets andobjects stored on OBS.

Object Storage ServiceAPI Reference

Provides detailed information about REST APIs of OBS.

Object Storage ServiceFAQs

Provides frequently asked questions about OBS.

Management console The interactive web-based management console enables you toimplement most OBS functions to manage your resourceswithout programming.

OBS Browser An Amazon S3 compatible client that can be installed in yourlocal computer. Through OBS Browser, you can implementmost OBS functions to manage your resources withoutprogramming.

SDK Contains underlying REST APIs and apply to multipleprogramming languages, including Java, .Net, Android, Python,C++, Ruby, and PHP and provides related software toolpackages, demos, API documents, and development guides.

Object Storage ServiceUser Guide 8 Obtaining More Resources


137

http://www.hwclouds.com/en-us/

http://www.hwclouds.com/en-us/

http://support.hwclouds.com/en-us