mc admin policy create

Creates a new policy on the target AIStor deployment.

AIStor deployments include the following built-in policies by default:

• readonly
• readwrite
• diagnostics
• writeonly

{
   "Version": "2012-10-17",
   "Statement": [
      {
         "Effect": "Allow",
         "Action": [
            "s3:ListAllMyBuckets"
         ],
         "Resource": [
            "arn:aws:s3:::*"
         ]
      }
   ]
}

mc admin policy create myminio listmybuckets /tmp/listmybuckets.json

mc admin policy create     \
                TARGET     \
                POLICYNAME \
                POLICYPATH

The mc admin policy create command accepts the following arguments:

The alias of a configured AIStor deployment on which to add the new policy.

The name of the policy to add.

Specifying the name of an existing policy overwrites that policy on the TARGET AIStor deployment.

The file path of the policy to add. The file must be a JSON-formatted file with IAM-compatible syntax and no more than 2048 characters.

This command supports any of the global flags.

Create a new policy called writeonly from the JSON file at /tmp/writeonly.json on the deployment at the alias myminio.

mc admin policy create myminio writeonly /tmp/writeonly.json