How Can I Control Access to OBS?
What Are the Differences Between Using an IAM Policy and a Bucket Policy in Access Control?
What Is the Relationship Between a Bucket Policy and an Object Policy?