`mc policy set`

Table of Contents

Syntax
- Parameters
- Global Flags
Examples
- Set Anonymous Policy for Bucket
Behavior
- S3 Compatibility

Syntax

The mc policy set command sets anonymous (i.e. unauthenticated or public) access policies for a bucket.

Buckets with anonymous policies allow clients to access the bucket contents and perform actions consistent with the specified policy without authentication.

To set anonymous bucket policies using an IAM JSON policy, use the mc policy set-json command.

EXAMPLE

The following command sets anonymous access policies for several buckets on the myminio MinIO deployment:

mc policy set upload myminio/uploads
mc policy set download myminio/downloads
mc policy set public myminio/public

Applications can perform the following operations without authentication:

PUT objects to myminio/uploads and myminio/public.
GET objects from myminio/downloads and myminio/public.

SYNTAX

The command has the following syntax:

mc [GLOBALFLAGS] policy set PERMISSION ALIAS

Brackets [] indicate optional parameters.
Parameters sharing a line are mutually dependent.
Parameters seperated using the pipe | operator are mutually exclusive.

Copy the example to a text editor and modify as-needed before running the command in the terminal/shell.

Parameters

PERMISSION

Required Name of the policy to assign to the specified ALIAS. Specify one of the following values:

none - Disable anonymous access to the ALIAS.
download - Enable download-only access to the ALIAS.
upload - Enable upload-only access to the ALIAS.
public - Enable download and upload access to the ALIAS.

ALIAS

Required The full path to the bucket or bucket prefix to which the command applies the specified PERMISSION.

Specify the alias of the MinIO or other S3-compatible service and the full path to the bucket or bucket prefix. For example:

mc set public play/mybucket

Specify a bucket prefix to set the policy on only that prefix. For example, this command sets distinct anonymous bucket policies on the mybucket/downloads and mybucket/uploads prefixes:

mc set download play/mybucket/downloads
mc set upload play/mybucket/uploads

Global Flags

--debug

Optional

Enables verbose output to the console.

For example:

mc --debug COMMAND

--config-dir: Optional
The path to a JSON formatted configuration file that mc uses for storing data. See Configuration File for more information on how mc uses the configuration file.

--JSON

Optional

Enables JSON lines formatted output to the console.

For example:

mc --JSON COMMAND

--no-color: Optional
Disables the built-in color theme for console output. Useful for dumb terminals.

--quiet: Optional
Suppresses console output.

--insecure: Optional
Disables TLS/SSL certificate verification. Allows TLS connectivity to servers with invalid certificates. Exercise caution when using this option against untrusted S3 hosts.

--version: Optional
Displays the current version of mc.

--help: Optional
Displays a summary of command usage on the terminal.

Examples

Set Anonymous Policy for Bucket

Use mc policy set to set the anonymous policy for a bucket:

mc policy set POLICY ALIAS/PATH

Replace POLICY with a supported permission.
Replace ALIAS with the alias of a configured S3-compatible host.
Replace PATH with the destination bucket.

Behavior

S3 Compatibility

The mc commandline tool is built for compatibility with the AWS S3 API and is tested MinIO and AWS S3 for expected functionality and behavior.

MinIO provides no guarantees for other S3-compatible services, as their S3 API implementation is unknown and therefore unsupported. While mc commands may work as documented, any such usage is at your own risk.