mc policy set-json

Syntax

The mc policy set-json command sets anonymous (i.e. unauthenticated or public) access policies for a bucket using using an IAM JSON policy document.

Buckets with anonymous policies allow clients to access the bucket contents and perform actions consistent with the specified policy without authentication.

The following command applies the JSON-formatted anonymous policy to the mydata bucket on the myminio MinIO deployment:

mc policy set-json ~/mydata-anonymous.json myminio/mydata

The command has the following syntax:

mc [GLOBALFLAGS] set-json POLICY ALIAS
  • Brackets [] indicate optional parameters.

  • Parameters sharing a line are mutually dependent.

  • Parameters seperated using the pipe | operator are mutually exclusive.

Copy the example to a text editor and modify as-needed before running the command in the terminal/shell.

Parameters

POLICY

Required The path to the JSON-formatted policy to assign to the specified ALIAS.

ALIAS

Required The full path to the bucket or bucket prefix to which the command applies the specified POLICY.

Specify the alias of the MinIO or other S3-compatible service and the full path to the bucket or bucket prefix. For example:

mc set-json public play/mybucket

Global Flags

--debug
Optional

Enables verbose output to the console.

For example:

mc --debug COMMAND
--config-dir
Optional

The path to a JSON formatted configuration file that mc uses for storing data. See Configuration File for more information on how mc uses the configuration file.

--JSON
Optional

Enables JSON lines formatted output to the console.

For example:

mc --JSON COMMAND
--no-color
Optional

Disables the built-in color theme for console output. Useful for dumb terminals.

--quiet
Optional

Suppresses console output.

--insecure
Optional

Disables TLS/SSL certificate verification. Allows TLS connectivity to servers with invalid certificates. Exercise caution when using this option against untrusted S3 hosts.

--version
Optional

Displays the current version of mc.

--help
Optional

Displays a summary of command usage on the terminal.

Examples

Set Anonymous Policy for Bucket

Use mc policy set-json to set the anonymous policy for a bucket:

mc policy set-json POLICY ALIAS/PATH
  • Replace POLICY with a supported POLICY.

  • Replace ALIAS with the alias of a configured S3-compatible host.

  • Replace PATH with the destination bucket.

Remove Anonymous Policy for Bucket

Use mc policy set to clear the anonymous policy for a bucket:

mc policy set none ALIAS/PATH
  • Replace ALIAS with the alias of a configured S3-compatible host.

  • Replace PATH with the destination bucket.

Behavior

S3 Compatibility

The mc commandline tool is built for compatibility with the AWS S3 API and is tested MinIO and AWS S3 for expected functionality and behavior.

MinIO provides no guarantees for other S3-compatible services, as their S3 API implementation is unknown and therefore unsupported. While mc commands may work as documented, any such usage is at your own risk.