{
  "Version": "1",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "oss:ListObjects"
      ],
      "Resource": [
        "acs:oss:*:*:k8s-data"
      ],
      "Condition": {
        "StringLike": {
          "oss:Prefix": "*"
        }
      }
    },
    {
      "Effect": "Allow",
      "Action": [
        "oss:Get*",
        "oss:List*",
        "oss:Put*",
        "oss:AbortMultipartUpload"
      ],
      "Resource": [
        "acs:oss:*:*:k8s-data/*"
      ]
    }
  ]
}

完全控制

{
  "Version": "1",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "oss:ListObjects"
      ],
      "Resource": [
        "acs:oss:*:*:k8s-data"
      ],
      "Condition": {
        "StringLike": {
          "oss:Prefix": "*"
        }
      }
    },
    {
      "Effect": "Allow",
      "Action": [
        "oss:*"
      ],
      "Resource": [
        "acs:oss:*:*:k8s-data/*"
      ]
    }
  ]
}

备注：需要根据实际情况将"k8s-data"替换成用户自己的buckets名称。

aliyun oss 授权文件书写

原文：https://blog.51cto.com/mjunetwslinux/2408056