Configuring Object Storage Repository as Immutable Storage
KB ID: 190026
Overview:
Configuring an Object Storage Repository as Immutable Storage requires specific permissions to be granted. This article delineates the essential permissions and presents the JSON format of an IAM user policy necessary for successful configuration.
Permissions Required:
To configure the Object Storage Repository as Immutable Storage, the following permissions are necessary:
"s3:ListBucket"
"s3:PutObject"
"s3:PutObjectAcl"
"s3:PutObjectTagging"
"s3:PutObjectVersionTagging"
"s3:PutObjectVersionAcl"
"s3:PutObjectRetention"
"s3:DeleteObject"
"s3:DeleteObjectVersion"
"s3:GetObject"
"s3:GetObjectAcl"
"s3:GetObjectTagging"
"s3:BypassGovernanceRetention"
"s3:GetObjectVersion"
"s3:GetBucketLocation"
"s3:ListBucket"
"s3:ListBucketMultipartUploads"
"s3:ListMultipartUploadParts"
"s3:AbortMultipartUpload"
"s3:PutLifecycleConfiguration"
"s3:GetLifecycleConfiguration"
"s3:GetBucketObjectLockConfiguration"
"s3:ListBucketVersions"
It is imperative to ensure that the user performing the configuration possesses these specific permissions.
By ensuring the possession of these permissions and attaching the specified IAM user policy, the user will be equipped with the necessary capabilities to configure the Object Storage Repository as Immutable Storage.