mc anonymous set
Syntax
The mc anonymous set
command sets anonymous (i.e. unauthenticated or public)
access policies for a bucket.
Buckets with anonymous policies allow clients to access the bucket contents and perform actions consistent with the specified policy without authentication.
To set anonymous bucket policies using an IAM
JSON policy, use the
mc anonymous set-json
command.
The following command sets anonymous access policies for several
buckets on the myminio
MinIO deployment:
mc anonymous set upload myminio/uploads
mc anonymous set download myminio/downloads
mc anonymous set public myminio/public
Applications can perform the following operations without authentication:
PUT
objects tomyminio/uploads
andmyminio/public
.GET
objects frommyminio/downloads
andmyminio/public
.
The command has the following syntax:
mc [GLOBALFLAGS] policy set PERMISSION ALIAS
Brackets
[]
indicate optional parameters.Parameters sharing a line are mutually dependent.
Parameters separated using the pipe
|
operator are mutually exclusive.
Copy the example to a text editor and modify as-needed before running the command in the terminal/shell.
Parameters
- PERMISSION
Required Name of the policy to assign to the specified
ALIAS
. Specify one of the following values:none
- Disable anonymous access to theALIAS
.download
- Enable download-only access to theALIAS
.upload
- Enable upload-only access to theALIAS
.public
- Enable download and upload access to theALIAS
.
- ALIAS
Required The full path to the bucket or bucket prefix to which the command applies the specified
PERMISSION
.Specify the alias of the MinIO or other S3-compatible service and the full path to the bucket or bucket prefix. For example:
mc anonymous set public play/mybucket
Specify a bucket prefix to set the policy on only that prefix. For example, this command sets distinct anonymous bucket policies on the
mybucket/downloads
andmybucket/uploads
prefixes:mc anonymous set download play/mybucket/downloads mc anonymous set upload play/mybucket/uploads
Global Flags
This command supports any of the global flags.
Examples
Set Anonymous Policy for Bucket
Use mc anonymous set
to set the anonymous policy for a
bucket:
mc anonymous set POLICY ALIAS/PATH
Replace
POLICY
with a supportedpermission
.Replace
ALIAS
with thealias
of a configured S3-compatible host.Replace
PATH
with the destination bucket.
Behavior
S3 Compatibility
The mc commandline tool is built for compatibility with the AWS S3 API and is tested with MinIO and AWS S3 for expected functionality and behavior.
MinIO provides no guarantees for other S3-compatible services, as their S3 API implementation is unknown and therefore unsupported. While mc commands may work as documented, any such usage is at your own risk.