Destination bucket
diff --git a/docs/obs/umn/obs_03_0008.html b/docs/obs/umn/obs_03_0008.html
new file mode 100644
index 00000000..d09910e9
--- /dev/null
+++ b/docs/obs/umn/obs_03_0008.html
@@ -0,0 +1,17 @@
+
+
+Monitoring
+
+
+
diff --git a/docs/obs/umn/obs_03_0009.html b/docs/obs/umn/obs_03_0009.html
new file mode 100644
index 00000000..34b85850
--- /dev/null
+++ b/docs/obs/umn/obs_03_0009.html
@@ -0,0 +1,27 @@
+
+
+Monitoring OBS
+ScenariosYou may send PUT and GET requests continuously when using OBS, which generates upload and download traffic. You may also receive error responses from the server. Cloud Eye can perform automatic and real-time monitoring over your buckets. It triggers alarms and notifications upon operations to help you understand your bucket access requests, traffic, and error responses in a timely manner.
+ You do not need to separately subscribe to Cloud Eye. It starts automatically once you create a resource (a bucket, for example) in OBS. For more information about Cloud Eye, see Cloud Eye User Guide.
+ Figure 1 Cloud Eye monitoring
+
+ Setting Alarm RulesIn addition to the automatic and real-time monitoring, you can configure alarm rules in Cloud Eye to send alarm notifications when specified situation occurs.
+ For details, see Creating Alarm Rules in Cloud Eye User Guide.
+
+
+ OBS Monitoring Metrics
+FunctionsThis section defines the namespace, list, and dimensions of monitoring metrics reported by OBS to Cloud Eye. You can use the management console or APIs provided by Cloud Eye to search for monitoring metrics and alarms generated by OBS.
+
+
+ Monitoring Metrics
+ Metric ID
+ |
+Metric
+ |
+Description
+ |
+Value Range
+ |
+Monitored Entity
+ |
+Monitoring Period (Original Metric)
+ |
+
|---|
+
+download_bytes
+ |
+Bytes Downloaded
+ |
+Specifies the response bytes of all download requests made to all buckets in a region, including bytes in HTTP entity bodies.
+Unit: byte
+ |
+≥ 0 bytes
+ |
+Bucket
+ |
+5 min
+ |
+
+upload_bytes
+ |
+Bytes Uploaded
+ |
+Specifies the bytes of all upload requests made to all buckets in a region, including bytes in HTTP entity bodies.
+Unit: byte
+ |
+≥ 0 bytes
+ |
+Bucket
+ |
+5 min
+ |
+
+get_request_count
+ |
+GET Requests
+ |
+Specifies the number of GET, HEAD, or OPTIONS requests made to all buckets and objects in the buckets of a region.
+Unit: count
+ |
+≥ 0 counts
+ |
+Bucket
+ |
+5 min
+ |
+
+put_request_count
+ |
+PUT Requests
+ |
+Specifies the number of PUT, POST, and DELETE requests made to all buckets and objects in the buckets of a region.
+Unit: count
+ |
+≥ 0 counts
+ |
+Bucket
+ |
+5 min
+ |
+
+first_byte_latency
+ |
+First Byte Download Delay
+ |
+Specifies the average time from receiving a GET, HEAD, or OPTIONS request to the time that the system starts to respond in a measurement period.
+Unit: millisecond
+ |
+≥ 0 ms
+ |
+Bucket
+ |
+5 min
+ |
+
+request_count_4xx
+ |
+4xx Errors
+ |
+Specifies the times that the server responds to requests whose error codes are 4xx.
+Unit: count
+ |
+≥ 0 counts
+ |
+Bucket
+ |
+5 min
+ |
+
+request_count_5xx
+ |
+5xx Errors
+ |
+Specifies the times that the server responds to requests whose error codes are 5xx.
+Unit: count
+ |
+≥ 0 counts
+ |
+Bucket
+ |
+5 min
+ |
+
+
+
+
+
+ Dimensions
+ Table 1 DimensionsKey
+ |
+Value
+ |
+
|---|
+
+bucket_name
+ |
+Bucket dimension. The value is the bucket name.
+ |
+
+
+
+
+
+ Will an Object Deletion in a Source Bucket Be Synchronized to the Destination Bucket?
-If you enable synchronous deletion, deleting an object in a source bucket will synchronously delete its copy in the destination bucket. If you do not enable this function, delete actions in the source bucket do not make object copies in the destination bucket deleted.
+ If you enable synchronous deletion, deleting an object in a source bucket will synchronously delete its copy in the destination bucket. If you do not enable this function, delete actions in the source bucket do not make object copies in the destination bucket deleted.
-
diff --git a/docs/obs/umn/obs_03_0035.html b/docs/obs/umn/obs_03_0035.html
index 05edcd69..c3d229d2 100644
--- a/docs/obs/umn/obs_03_0035.html
+++ b/docs/obs/umn/obs_03_0035.html
@@ -7,6 +7,7 @@
Procedure- Log in to the management console with your account.
- On the top menu bar, choose Service List > Management & Deployment > Identity and Access Management. The IAM console is displayed.
- Create a user group and assign OBS permissions to it.
A user group is a collection of users. By assigning permissions to a user group, you assign permissions to the users in this group. After you create an IAM user, add it to one or more user groups, so that it can inherit the permissions from the groups. - In the navigation pane, choose User Groups. The User Groups page is displayed.
- Click Create User Group.
- Enter a user group name and click OK.
The user group is displayed in the user group list once the creation is complete.
- Locate the user group you created and click Modify in the Operation column of the row.
- In the Group Permissions area, locate OBS (S3), click Attach Policy in the Operation column, select the policy name, and click OK.
 In the Policy Information area, you can view the details about the policy.
+ Due to data caching, an RBAC policy and fine-grained policy involving OBS actions will take effect 10 to 15 minutes after it is attached to a user and user group.
Permissions Management
-You can use Identity and Access Management (IAM) to manage OBS permissions and control access to your resources. IAM provides identity authentication, permissions management, and access control.
+
+ You can use Identity and Access Management (IAM) to manage OBS permissions and control access to your resources. IAM provides identity authentication, permissions management, and access control.
You can create IAM users for your employees, and assign permissions to these users on a principle of least privilege (PoLP) basis to control their access to specific resource types. For example, you can create IAM users for software developers and assign specific permissions to allow them to use OBS resources but prevent them from being able to delete resources or perform any high-risk operations.
If your account does not require individual IAM users for permissions management, skip this section.
IAM is offered for free. You pay only for the resources in your account. For more information about IAM, see section "Service Overview" in the Identity and Access Management User Guide.
OBS PermissionsBy default, new IAM users do not have any permissions assigned. You can assign permissions to these users by adding them to one or more groups and attaching policies to the groups. IAM provides preset system policies that define common permissions for different services, such as full control access and read-only. You can directly use these preset policies.
OBS is a global service deployed and accessed without specifying any physical region. OBS permissions are assigned to users in the global project, and users do not need to switch regions when accessing OBS.
RBAC policy: An RBAC policy consists of permissions for an entire service. Users in a group with such a policy assigned are granted all the required permissions, including permissions for accessing and managing that service. RBAC policies do not support operation-specific permission control.
- Due to data caching, an RBAC policy involving OBS actions will take effect 10 to 15 minutes after it is attached to a user and a user group.
+ Due to data caching, an RBAC policy and fine-grained policy involving OBS actions will take effect 10 to 15 minutes after it is attached to a user and a user group.
Table 1 lists all system policies of OBS.
- Table 1 OBS system policiesPolicy
+Table 1 OBS system policiesPolicy
|
-Description
+ | Description
|
-Policy Type
+ | Policy Type
|
|---|
-Tenant Administrator
+ | Tenant Administrator
|
-Allows you to perform any operation on all cloud resources under the account.
+ | Allows you to perform any operation on all cloud resources under the account.
OBS policies are configured under Global service > OBS.
|
-RBAC policy
+ | RBAC policy
|
-Tenant Guest
+ | Tenant Guest
|
-Allows you to perform read-only operations on all cloud resources under the account.
+ | Allows you to perform read-only operations on all cloud resources under the account.
OBS policies are configured under Global service > OBS.
|
-RBAC policy
+ | RBAC policy
|
-OBS Buckets Viewer
+ | OBS Buckets Viewer
|
-Allows you to list buckets, obtain basic bucket information and bucket metadata, and list objects.
+ | Allows you to list buckets, obtain basic bucket information and bucket metadata, and list objects.
OBS policies are configured under Global service > OBS.
|
-RBAC policy
+ | RBAC policy
+ |
+
+OBS Viewer
+ |
+Allows you to list buckets, obtain basic bucket information and bucket metadata, and list objects.
+This policy is a system-defined policy of fine-grained authorization. Users with fine-grained authorization can use this policy and can create custom policy template based on this policy.
+OBS policies are configured under Global service > OBS.
+ |
+Fine-grained policy
+ |
+
+OBS Operator
+ |
+Allows you to perform all operations defined in OBS Viewer and to perform basic object operations, such as uploading objects, downloading objects, deleting objects, and obtaining object ACLs.
+This policy is a system-defined policy of fine-grained authorization. Users with fine-grained authorization can use this policy and can create custom policy template based on this policy.
+OBS policies are configured under Global service > OBS.
+ |
+Fine-grained policy
|
@@ -50,376 +69,656 @@
The following table lists operations that can be performed under each set of OBS permission.
-Table 2 Permissions and the allowed operations on OBS resourcesOperation
+Table 2 Permissions and the allowed operations on OBS resourcesOperation
|
-Tenant Administrator
+ | Tenant Administrator
|
-Tenant Guest
+ | Tenant Guest
|
-OBS Buckets Viewer
+ | OBS Administrator
+ |
+OBS Buckets Viewer
+ |
+OBS ReadOnlyAccess
+ |
+OBS OperateAccess
|
|---|
-Listing buckets
+ | Listing buckets
|
-Yes
+ | Yes
|
-Yes
+ | Yes
|
-Yes
+ | Yes
+ |
+Yes
+ |
+Yes
+ |
+Yes
|
-Creating buckets
+ | Creating buckets
|
-Yes
+ | Yes
|
-No
+ | No
|
-No
+ | Yes
+ |
+No
+ |
+No
+ |
+No
|
-Deleting buckets
+ | Deleting buckets
|
-Yes
+ | Yes
|
-No
+ | No
|
-No
+ | Yes
+ |
+No
+ |
+No
+ |
+No
|
-Obtaining basic bucket information
+ | Obtaining basic bucket information
|
-Yes
+ | Yes
|
-Yes
+ | Yes
|
-Yes
+ | Yes
+ |
+Yes
NOTE: The statistics of used storage space and number of objects cannot be obtained.
|
-
-Controlling bucket access
+ | Yes
+ NOTE: The statistics of used storage space and number of objects cannot be obtained.
+
|
-Yes
- |
-No
- |
-No
+ | Yes
+ NOTE: The statistics of used storage space and number of objects cannot be obtained.
+
|
-Managing bucket policies
+ | Controlling bucket access
|
-Yes
+ | Yes
|
-No
+ | No
|
-No
+ | Yes
+ |
+No
+ |
+No
+ |
+No
|
-Modifying bucket storage classes
+ | Managing bucket policies
|
-Yes
+ | Yes
|
-No
+ | No
|
-No
+ | Yes
+ |
+No
+ |
+No
+ |
+No
|
-Listing objects
+ | Modifying bucket storage classes
|
-Yes
+ | Yes
|
-Yes
+ | No
|
-Yes
+ | Yes
+ |
+No
+ |
+No
+ |
+No
|
-Listing objects with multiple versions
+ | Listing objects
|
-Yes
+ | Yes
|
-Yes
+ | Yes
|
-No
+ | Yes
+ |
+Yes
+ |
+Yes
+ |
+Yes
|
-Uploading files
+ | Listing objects with multiple versions
|
-Yes
+ | Yes
|
-No
+ | Yes
|
-No
+ | Yes
+ |
+No
+ |
+No
+ |
+No
|
-Creating folders
+ | Uploading files
|
-Yes
+ | Yes
|
-No
+ | No
|
-No
+ | Yes
+ |
+No
+ |
+No
+ |
+Yes
|
-Deleting files
+ | Creating folders
|
-Yes
+ | Yes
|
-No
+ | No
|
-No
+ | Yes
+ |
+No
+ |
+No
+ |
+Yes
|
-Deleting folders
+ | Deleting files
|
-Yes
+ | Yes
|
-No
+ | No
|
-No
+ | Yes
+ |
+No
+ |
+No
+ |
+Yes
|
-Downloading files
+ | Deleting folders
|
-Yes
+ | Yes
|
-Yes
+ | No
|
-No
+ | Yes
+ |
+No
+ |
+No
+ |
+Yes
|
-Deleting files with multiple versions
+ | Downloading files
|
-Yes
+ | Yes
|
-No
+ | Yes
|
-No
+ | Yes
+ |
+No
+ |
+No
+ |
+Yes
|
-Downloading files with multiple versions
+ | Deleting files with multiple versions
|
-Yes
+ | Yes
|
-Yes
+ | No
|
-No
+ | Yes
+ |
+No
+ |
+No
+ |
+Yes
|
-Modifying object storage classes
+ | Downloading files with multiple versions
|
-Yes
+ | Yes
|
-No
+ | Yes
|
-No
+ | Yes
+ |
+No
+ |
+No
+ |
+Yes
|
-Restoring files
+ | Modifying object storage classes
|
-Yes
+ | Yes
|
-No
+ | No
|
-No
+ | Yes
+ |
+No
+ |
+No
+ |
+No
|
-Canceling the deletion of files
+ | Restoring files
|
-Yes
+ | Yes
|
-No
+ | No
|
-No
+ | Yes
+ |
+No
+ |
+No
+ |
+No
|
-Deleting fragments
+ | Canceling the deletion of files
|
-Yes
+ | Yes
|
-No
+ | No
|
-No
+ | Yes
+ |
+No
+ |
+No
+ |
+Yes
|
-Controlling object access
+ | Deleting fragments
|
-Yes
+ | Yes
|
-No
+ | No
|
-No
+ | Yes
+ |
+No
+ |
+No
+ |
+Yes
|
-Configuring object metadata
+ | Controlling object access
|
-Yes
+ | Yes
|
-No
+ | No
|
-No
+ | Yes
+ |
+No
+ |
+No
+ |
+No
|
-Obtaining object metadata
+ | Configuring object metadata
|
-Yes
+ | Yes
|
-Yes
+ | No
|
-No
+ | Yes
+ |
+No
+ |
+No
+ |
+No
|
-Managing versioning
+ | Obtaining object metadata
|
-Yes
+ | Yes
|
-No
+ | Yes
|
-No
+ | Yes
+ |
+No
+ |
+No
+ |
+Yes
|
-Managing logging
+ | Managing versioning
|
-Yes
+ | Yes
|
-No
+ | No
|
-No
+ | Yes
+ |
+No
+ |
+No
+ |
+No
|
-Managing event notifications
+ | Managing logging
|
-Yes
+ | Yes
|
-No
+ | No
|
-No
+ | Yes
+ |
+No
+ |
+No
+ |
+No
|
-Managing tags
+ | Managing event notifications
|
-Yes
+ | Yes
|
-No
+ | No
|
-No
+ | Yes
+ |
+No
+ |
+No
+ |
+No
|
-Managing lifecycle rules
+ | Managing tags
|
-Yes
+ | Yes
|
-No
+ | No
|
-No
+ | Yes
+ |
+No
+ |
+No
+ |
+No
|
-Managing static website hosting
+ | Managing lifecycle rules
|
-Yes
+ | Yes
|
-No
+ | No
|
-No
+ | Yes
+ |
+No
+ |
+No
+ |
+No
|
-Managing CORS rules
+ | Managing static website hosting
|
-Yes
+ | Yes
|
-No
+ | No
|
-No
+ | Yes
+ |
+No
+ |
+No
+ |
+No
|
-Managing URL validation
+ | Managing CORS rules
|
-Yes
+ | Yes
|
-No
+ | No
|
-No
+ | Yes
+ |
+No
+ |
+No
+ |
+No
|
-Managing domain names
+ | Managing URL validation
|
-Yes
+ | Yes
|
-No
+ | No
|
-No
+ | Yes
+ |
+No
+ |
+No
+ |
+No
|
-Managing cross-region replication
+ | Managing domain names
|
-Yes
+ | Yes
|
-No
+ | No
|
-No
+ | Yes
+ |
+No
+ |
+No
+ |
+No
|
-Configuring object ACL
+ | Managing cross-region replication
|
-Yes
+ | Yes
|
-No
+ | No
|
-No
+ | Yes
+ |
+No
+ |
+No
+ |
+No
|
-Configuring the ACL for an object of a specified version
+ | Configuring object ACL
|
-Yes
+ | Yes
|
-No
+ | No
|
-No
+ | Yes
+ |
+No
+ |
+No
+ |
+No
|
-Obtaining object ACL information
+ | Configuring the ACL for an object of a specified version
|
-Yes
+ | Yes
|
-Yes
+ | No
|
-No
+ | Yes
+ |
+No
+ |
+No
+ |
+No
|
-Obtaining the ACL information of a specified object version
+ | Obtaining object ACL information
|
-Yes
+ | Yes
|
-Yes
+ | Yes
|
-No
+ | Yes
+ |
+No
+ |
+No
+ |
+Yes
|
-Uploading in the multipart mode
+ | Obtaining the ACL information of a specified object version
|
-Yes
+ | Yes
|
-No
+ | Yes
|
-No
+ | Yes
+ |
+No
+ |
+No
+ |
+Yes
|
-Listing uploaded parts
+ | Uploading in the multipart mode
|
-Yes
+ | Yes
|
-Yes
+ | No
|
-No
+ | Yes
+ |
+No
+ |
+No
+ |
+Yes
|
-Canceling multipart uploads
+ | Listing uploaded parts
|
-Yes
+ | Yes
|
-No
+ | Yes
|
-No
+ | Yes
+ |
+No
+ |
+No
+ |
+Yes
+ |
+
+Canceling multipart uploads
+ |
+Yes
+ |
+No
+ |
+Yes
+ |
+No
+ |
+No
+ |
+Yes
+ |
+
+Configuring requester-pays
+ |
+Yes
+ |
+No
+ |
+Yes
+ |
+No
+ |
+No
+ |
+No
+ |
+
+Obtaining the requester-pays configuration information
+ |
+Yes
+ |
+Yes
+ |
+Yes
+ |
+No
+ |
+No
+ |
+No
|
diff --git a/docs/obs/umn/obs_03_0046.html b/docs/obs/umn/obs_03_0046.html
index d665ee4a..4bf5143f 100644
--- a/docs/obs/umn/obs_03_0046.html
+++ b/docs/obs/umn/obs_03_0046.html
@@ -1,6 +1,6 @@
-Sharing a File
+Sharing an Object
ScenariosYou can allow anyone to access your file stored in OBS by sharing the temporary URL of the file.
Background InformationFile sharing is temporary. All shared URLs are temporary with a validity period.
@@ -10,7 +10,7 @@
Limitations and Constraints- An object shared from OBS Console can be valid for one minute to 18 hours. If you need a longer validity period for a shared object, use the client tool OBS Browser+ that supports a validity period from one minute to 30 days. Or, you can configure a bucket policy or object policy to grant the access permissions of an object to other users permanently.
- Only buckets of version 3.0 support file sharing. You can view the bucket version in the Basic Information area on the Overview page of a bucket.
- Encrypted objects cannot be shared.
- To share a cold object, restore it first.
- Procedure- In the bucket list, click the bucket you want to operate. The Overview page of the bucket is displayed.
- In the navigation pane, click Objects.
- Locate the file to be shared and click Share under the Operation column. The dialog box as given in Figure 1 is displayed.
Once the Share File dialog box is opened, the URL is effective and valid for five minutes by default. If you change the validity period, the authentication information in the URL changes accordingly, and the URL's new validity period starts upon the change.
+Procedure- In the bucket list, click the bucket you want to operate. The Overview page of the bucket is displayed.
- In the navigation pane, choose Objects.
- Locate the file to be shared and click Share in the Operation column. The dialog box as given in Figure 1 is displayed.
Once the Share File dialog box is opened, the URL is effective and valid for five minutes by default. If you change the validity period, the authentication information in the URL changes accordingly, and the URL's new validity period starts upon the change.
Figure 1 Sharing a file
- Operate the URL as follows:
- Click Open URL to preview the file on a new page or directly download it to your default download path.
- Click Copy Link to share the link to others for them to access this file using a browser.
- Click Copy Path to share the file path to users who have access permissions to the bucket. The users then can search for the file by pasting the shared path to the search box of the bucket.
Within the validity period of a URL, any user who has the URL can access the file.
diff --git a/docs/obs/umn/obs_03_0051.html b/docs/obs/umn/obs_03_0051.html
index 75250082..9406a429 100644
--- a/docs/obs/umn/obs_03_0051.html
+++ b/docs/obs/umn/obs_03_0051.html
@@ -1,23 +1,23 @@
Actions
- Actions are related to resources. When the resource is the current bucket, actions configured in the bucket policy must be bucket related actions. When objects are specified as resources, actions configured in the bucket policy must be object related actions.
+ Actions are related to resources. When the resource is the current bucket, bucket-related actions should be configured in a bucket policy. When objects are specified as resources, object-related actions should be configured in a bucket policy.
Actions can be specified in either of the following ways:
- Include: The policy takes effect on specified actions.
- Exclude: The policy takes effect on all actions except the specified ones.
Actions Related to Buckets
Table 1 Actions related to bucketsType
|
-Value
+ | Value
|
-Description
+ | Description
|
|---|
General
|
-*
+ | *
|
-The value supports a wildcard character (*) that indicates all operations can be performed.
+ | The value supports a wildcard character (*) that indicates all operations can be performed.
|
Get*
@@ -37,9 +37,9 @@
|
Bucket
|
-DeleteBucket
+ | DeleteBucket
|
-Deletes the bucket.
+ | Deletes the bucket.
|
ListBucket
@@ -132,91 +132,91 @@
Actions Related to Objects
- Table 2 Actions related to objectsType
+Table 2 Actions related to objectsType
|
-Value
+ | Value
|
-Description
+ | Description
|
|---|
-General
+ | General
|
-*
+ | *
|
-The value supports a wildcard character (*) that indicates all operations can be performed.
+ | The value supports a wildcard character (*) that indicates all operations can be performed.
|
-Get*
+ | Get*
|
-The value supports a wildcard character (*) that indicates all GET operations can be performed.
+ | The value supports a wildcard character (*) that indicates all GET operations can be performed.
|
-Put*
+ | Put*
|
-The value supports a wildcard character (*) that indicates all PUT operations can be performed.
+ | The value supports a wildcard character (*) that indicates all PUT operations can be performed.
|
-List*
+ | List*
|
-The value supports a wildcard character (*) that indicates all LIST operations can be performed.
+ | The value supports a wildcard character (*) that indicates all LIST operations can be performed.
|
-Object
+ | Object
|
-GetObject
+ | GetObject
|
-Obtains an object and its metadata.
+ | Obtains an object and its metadata.
|
-GetObjectVersion
+ | GetObjectVersion
|
-Obtains the object of a specified version and its metadata.
+ | Obtains the object of a specified version and its metadata.
|
-PutObject
+ | PutObject
|
-Performs PUT upload, POST upload, multipart upload, initialization of uploaded parts, and merging of parts.
+ | Performs PUT upload, POST upload, multipart upload, initialization of uploaded parts, and merging of parts.
|
-GetObjectAcl
+ | GetObjectAcl
|
-Obtains the object ACL information.
+ | Obtains the object ACL information.
|
-GetObjectVersionAcl
+ | GetObjectVersionAcl
|
-Obtains the ACL information of a specified object version.
+ | Obtains the ACL information of a specified object version.
|
-PutObjectAcl
+ | PutObjectAcl
|
-Configures the ACL for an object.
+ | Configures the ACL for an object.
|
-PutObjectVersionAcl
+ | PutObjectVersionAcl
|
-Configures the ACL for a specified object version.
+ | Configures the ACL for a specified object version.
|
-DeleteObject
+ | DeleteObject
|
-Deletes an object.
+ | Deletes an object.
|
-DeleteObjectVersion
+ | DeleteObjectVersion
|
-Deletes a specified object version.
+ | Deletes a specified object version.
|
-ListMultipartUploadParts
+ | ListMultipartUploadParts
|
-Lists uploaded parts.
+ | Lists uploaded parts.
|
-AbortMultipartUpload
+ | AbortMultipartUpload
|
-Cancels a multipart upload task.
+ | Cancels a multipart upload task.
|
diff --git a/docs/obs/umn/obs_03_0054.html b/docs/obs/umn/obs_03_0054.html
index 5a4bcf45..c7cb139d 100644
--- a/docs/obs/umn/obs_03_0054.html
+++ b/docs/obs/umn/obs_03_0054.html
@@ -29,6 +29,12 @@
Allows you to set properties for objects.
|
+Monitoring
+ |
+- Cloud Eye can monitor the following OBS metrics:
- Download Traffic
- Upload Traffic
- GET Requests
- PUT Requests
- First Byte Download Delay
- 4xx Errors
- 5xx Errors
+
+ |
+
Auditing
|
With Cloud Trace Service (CTS), you can record data operations associated with OBS for later query, audit, and backtrack operations.
@@ -49,7 +55,7 @@
| Logs bucket access requests for analysis and auditing.
|
-Event notification
+ | Event notification
|
Allows you to receive messages and emails from OBS.
|
@@ -92,7 +98,12 @@
Cross origin resource sharing (CORS)
|
-Allows a web client in one origin to interact with resources in another one. CORS is a browser-standard mechanism defined by the World Wide Web Consortium (W3C). For general web page requests, website scripts and contents in one origin cannot interact with those in another origin because of Same Origin Policies (SOPs).
+ | Allows a web client in one origin to interact with resources in another one. CORS is a browser-standard mechanism defined by the World Wide Web Consortium (W3C). For general web page requests, website scripts and contents in one origin cannot interact with those in another because of Same Origin Policies (SOPs).
+ |
+
+Requester pays
+ |
+Lets the requester pay for data transfer and API calls associated with accessing resources in the bucket and you (the bucket owner) pay for only data storage in the bucket.
|
diff --git a/docs/obs/umn/obs_03_0088.html b/docs/obs/umn/obs_03_0088.html
index 9c59860d..477b0d8c 100644
--- a/docs/obs/umn/obs_03_0088.html
+++ b/docs/obs/umn/obs_03_0088.html
@@ -1,13 +1,13 @@
Bucket Default Encryption
-OBS enables you to configure default encryption for a bucket. After the configuration, objects uploaded to the bucket are automatically encrypted using the specified KMS key, improving data storage security.
+ OBS allows you to configure default encryption for a bucket. After the configuration, objects uploaded to this bucket are automatically encrypted using the specified KMS key, making data storage more secure.
You can enable default encryption when creating a bucket (see Creating a Bucket), or enable or disable default encryption after a bucket is created.
OBS encrypts only the objects uploaded after the default encryption is enabled, and does not encrypt those uploaded before. After default encryption is disabled, the encryption status of existing objects keeps unchanged, and you can still manually encrypt objects upon upload.
- Enabling Default Encryption for a Bucket- In the bucket list, click the bucket you want to operate. The Overview page of the bucket is displayed.
- In the right Basic Configurations area, click Default Encryption. The Default Encryption dialog box is displayed.
- Select Enable.
Key obs/default is selected by default for KMS encryption. You can also click Create KMS Key to switch to the management console of KMS and create customer master keys. Then back to OBS Console and select the key from the drop-down list box for KMS encryption.
+Enabling Default Encryption for a Bucket- In the bucket list, click the bucket you want to operate. The Overview page of the bucket is displayed.
- In the right Basic Configurations area, click Default Encryption. The Default Encryption dialog box is displayed.
- Select Enable.
Key obs/default is selected by default for KMS encryption. You can also click Create KMS Key to switch to the management console of KMS and create customer master keys. Then back to OBS Console and select the key from the drop-down list box for KMS encryption.
- Click OK.
Disabling Default Encryption for a Bucket- In the bucket list, click the bucket you want to operate. The Overview page of the bucket is displayed.
- In the right Basic Configurations area, click Default Encryption. The Default Encryption dialog box is displayed.
- Select Disable.
- Click OK.
+ Disabling Default Encryption for a Bucket- In the bucket list, click the bucket you want to operate. The Overview page of the bucket is displayed.
- In the right Basic Configurations area, click Default Encryption. The Default Encryption dialog box is displayed.
- Select Disable.
- Click OK.
diff --git a/docs/obs/umn/obs_03_0100.html b/docs/obs/umn/obs_03_0100.html
index e2827c0a..be42f9cf 100644
--- a/docs/obs/umn/obs_03_0100.html
+++ b/docs/obs/umn/obs_03_0100.html
@@ -1,7 +1,8 @@
What Are Factors that Affect the Upload and Download Speed of OBS?
- In theory, OBS has no limitations on either upload or download speeds, but, if you access OBS over a public network, your speed will be limited by public network conditions.
+ The OBS upload and download speed may be affected by:
+ - Bandwidth limit of OBS itself
- Bandwidth of the internet or intranet
diff --git a/docs/obs/umn/obs_03_0110.html b/docs/obs/umn/obs_03_0110.html
index b4e22472..c4facce2 100644
--- a/docs/obs/umn/obs_03_0110.html
+++ b/docs/obs/umn/obs_03_0110.html
@@ -11,6 +11,20 @@
Policy Structure and SyntaxA policy consists of a version and statements. Each policy can have multiple statements.
Figure 1 Policy structure
Policy syntax example:
+ {
+ "Version": "1.1",
+ "Statement": [
+ {
+ "Effect": "Allow",
+ "Action": [
+ "obs:bucket:ListAllMybuckets",
+ "obs:bucket:HeadBucket",
+ "obs:bucket:ListBucket",
+ "obs:bucket:GetBucketLocation"
+ ]
+ }
+ ]
+}
{
"Version": "1.0",
"Statement": [
@@ -26,23 +40,23 @@
]
}
- Table 1 Policy syntax parametersParameter
+Table 1 Policy syntax parametersParameter
|
-Description
+ | Description
|
|---|
-Version
+ | Version
|
-The version number of a policy. - 1.0: RBAC policies. An RBAC policy consists of permissions for an entire service. Users in a group with such a policy assigned are granted all of the permissions required for that service.
+ The version number of a policy. - 1.0: RBAC policies. An RBAC policy consists of permissions for an entire service. Users in a group with such a policy assigned are granted all of the permissions required for that service.
- 1.1: Fine-grained policies. A fine-grained policy consists of API-based permissions for operations on specific resource types. Fine-grained policies, as the name suggests, allow for more fine-grained control than RBAC policies. Users with such fine-grained permissions can only perform authorized operations on specific services.
|
|
-Statement
+ | Statement
|
-Permissions defined by a policy, including Effect and Action.
-- Effect
The valid values for Effect are Allow and Deny. System policies contain only Allow statements.
- - Action
Permissions of specific operations on resources. A policy can contain one or more permissions. The wildcard (*) is allowed to indicate all of the services, resource types, or operations depending on its location in the action.
+Permissions defined by a policy, including Effect and Action.
+- Effect
The valid values for Effect are Allow and Deny. System policies contain only Allow statements. For custom policies containing both Allow and Deny statements, the Deny statements take precedence.
+ - Action
Permissions of specific operations on resources in the format of Service name:Resource type:Operation. A policy can contain one or more permissions. The wildcard (*) is allowed to indicate all of the services, resource types, or operations depending on its location in the action. OBS has two resource types: bucket and object.
|
diff --git a/docs/obs/umn/obs_03_0121.html b/docs/obs/umn/obs_03_0121.html
new file mode 100644
index 00000000..aedec973
--- /dev/null
+++ b/docs/obs/umn/obs_03_0121.html
@@ -0,0 +1,122 @@
+
+
+Configuring Fine-Grained Policies
+Custom policies can be created to supplement the system-defined policies of OBS.
+ For details, see Creating a Custom Policy. The following provides examples of common OBS custom policies.
+ Example Custom Policies- Example 1: Grant all OBS permissions to users.
This policy allows users to perform any operation on OBS. {
+ "Version": "1.1",
+ "Statement": [
+ {
+ "Effect": "Allow",
+ "Action": [
+ "obs:*:*"
+ ]
+ }
+ ]
+}
+ - Example 2: Grant all OBS Console permissions to users.
This policy allows users to perform all operations on OBS Console.
+When a user logs in to OBS Console, the user may access resources of other services such as audit information in CTS. Therefore, in addition to the OBS permissions in example 1, you also need to configure the access permissions to other services. You need to configure the Tenant Guest permission for the global project and regional projects based on the services and regions that you use. {
+ "Version": "1.1",
+ "Statement": [
+ {
+ "Effect": "Allow",
+ "Action": [
+ "obs:*:*"
+ ]
+ }
+ ]
+}
+ - Example 3: Grant the read-only permission on a bucket to users (any directory).
This policy allows users to list and download all objects in bucket obs-example. {
+ "Version": "1.1",
+ "Statement": [
+ {
+ "Effect": "Allow",
+ "Action": [
+ "obs:object:GetObject",
+ "obs:bucket:ListBucket"
+ ],
+ "Resource": [
+ "obs:*:*:object:obs-example/*",
+ "obs:*:*:bucket:obs-example"
+ ]
+ }
+ ]
+}
+ - Example 4: Grant the read-only permission on a bucket to users (specified directory).
This policy allows users to download objects in only the my-project/ directory of bucket obs-example. Objects in other directories can be listed but cannot be downloaded. {
+ "Version": "1.1",
+ "Statement": [
+ {
+ "Effect": "Allow",
+ "Action": [
+ "obs:object:GetObject",
+ "obs:bucket:ListBucket"
+ ],
+ "Resource": [
+ "obs:*:*:object:obs-example/my-project/*",
+ "obs:*:*:bucket:obs-example"
+ ]
+ }
+ ]
+}
+ - Example 5: Grant the read and write permissions on a bucket to users (specified directory).
This policy allows users to list, download, upload, and delete objects in the my-project directory of bucket obs-example. {
+ "Version": "1.1",
+ "Statement": [
+ {
+ "Effect": "Allow",
+ "Action": [
+ "obs:object:GetObject",
+ "obs:object:ListMultipartUploadParts",
+ "obs:bucket:ListBucket",
+ "obs:object:DeleteObject",
+ "obs:object:PutObject"
+ ],
+ "Resource": [
+ "obs:*:*:object:obs-example/my-project/*",
+ "obs:*:*:bucket:obs-example"
+ ]
+ }
+ ]
+}
+ - Example 6: Grant all permissions on a bucket to users.
This policy allows users to perform any operation on bucket obs-example. {
+ "Version": "1.1",
+ "Statement": [
+ {
+ "Effect": "Allow",
+ "Action": [
+ "obs:*:*"
+ ],
+ "Resource": [
+ "obs:*:*:bucket:obs-example",
+ "obs:*:*:object:obs-example/*"
+ ]
+ }
+ ]
+}
+ - Example 7: Deny permissions to users to upload objects.
A deny policy must be used together with other policies. If the permissions assigned to a user contain both "Allow" and "Deny", the "Deny" permissions take precedence over the "Allow" permissions.
+If you grant the system policy OBS OperateAccess to a user but do not want the user to have the object upload permission (which is also a permission allowed by OBS OperateAccess), you can create a custom policy besides the OBS OperateAccess policy, to deny the user's upload permission. According to the authorization principle, the policy with the deny statement takes precedence, so that the user can perform all operations allowed by OBS OperateAccess, except uploading objects. The following is an example of a deny policy:
+{
+ "Version": "1.1",
+ "Statement": [
+ {
+ "Effect": "Deny",
+ "Action": [
+ "obs:object:PutObject"
+ ],
+ }
+ ]
+ }
+
+
+
Procedure- Log in to the management console with your account.
- On the top menu bar, choose Service List > Management & Deployment > Identity and Access Management. The IAM console is displayed.
- Create a user group and assign OBS permissions to it.
A user group is a collection of users. By assigning permissions to a user group, you assign permissions to the users in this group. After you create an IAM user, add it to one or more user groups, so that it can inherit the permissions from the groups. - In the navigation pane, choose User Groups. The User Groups page is displayed.
- Click Create User Group.
- Enter a user group name and click OK.
The user group is displayed in the user group list once the creation is complete.
- Locate the user group you created and click Modify in the Operation column of the row.
- In the Group Permissions area, locate OBS (S3), click Attach Policy in the Operation column, select the policy name, and click OK.
In the Policy Information area, you can view the details about the policy.
+ Due to data caching, an RBAC policy and fine-grained policy involving OBS actions will take effect 10 to 15 minutes after it is attached to a user and user group.
|
Conditions
|
-- Conditional Operator: IpAddress
- Key: SourceIP
- Value: 114.115.1.0/24
+ | - Conditional Operator: IpAddress
- Key: SourceIP
- Value: 114.115.1.0/24
|
diff --git a/docs/obs/umn/obs_03_0139.html b/docs/obs/umn/obs_03_0139.html
index 88eca8bf..2ca60a01 100644
--- a/docs/obs/umn/obs_03_0139.html
+++ b/docs/obs/umn/obs_03_0139.html
@@ -1,7 +1,7 @@
Can Deleted Data Be Recovered?
-- If versioning is enabled for a bucket, deleted objects are saved to the Deleted Objects list. You can recover objects from the Deleted Objects list. For details, see Undeleting a File.
- If versioning is not enabled, deleted objects cannot be recovered.
+ - If versioning is enabled for a bucket, deleted objects are saved to the Deleted Objects list. You can recover objects from the Deleted Objects list. For details, see Undeleting an Object.
- If versioning is not enabled, deleted objects cannot be recovered.
diff --git a/docs/obs/umn/obs_03_0144.html b/docs/obs/umn/obs_03_0144.html
index a3adfb58..f885798f 100644
--- a/docs/obs/umn/obs_03_0144.html
+++ b/docs/obs/umn/obs_03_0144.html
@@ -6,6 +6,8 @@
diff --git a/docs/obs/umn/obs_03_0332.html b/docs/obs/umn/obs_03_0147.html
similarity index 92%
rename from docs/obs/umn/obs_03_0332.html
rename to docs/obs/umn/obs_03_0147.html
index f358749f..63a794fa 100644
--- a/docs/obs/umn/obs_03_0332.html
+++ b/docs/obs/umn/obs_03_0147.html
@@ -1,4 +1,4 @@
-
+
Event Notifications
diff --git a/docs/obs/umn/obs_03_0204.html b/docs/obs/umn/obs_03_0204.html
index 63a09fe9..16d8484f 100644
--- a/docs/obs/umn/obs_03_0204.html
+++ b/docs/obs/umn/obs_03_0204.html
@@ -20,6 +20,13 @@
Creating an IAM Agency
+ Cloud Eye monitors OBS buckets, to collect statistics about the upload traffic, download traffic, the number of GET and PUT requests, the average Time to First Byte (TTFB) of GET requests, and the number of 4xx and 5xx errors.
+ |
+Cloud Eye
+ |
+OBS Monitoring Metrics
+ |
+
CTS collects records of operations on OBS resources, facilitating querying, audits, and backtracking.
|
Cloud Trace Service (CTS)
diff --git a/docs/obs/umn/obs_03_0300.html b/docs/obs/umn/obs_03_0300.html
index b7739d30..ced3f0e0 100644
--- a/docs/obs/umn/obs_03_0300.html
+++ b/docs/obs/umn/obs_03_0300.html
@@ -28,7 +28,7 @@
- Tags
-- Event Notifications
+ - Event Notifications
- Cross-Region Replication
@@ -42,6 +42,10 @@
- URL Validation
+- Requester Pays
+
+- Monitoring
+
- Cloud Trace Service
- Task Management
diff --git a/docs/obs/umn/obs_03_0302.html b/docs/obs/umn/obs_03_0302.html
index 2a9c505e..dde1f1eb 100644
--- a/docs/obs/umn/obs_03_0302.html
+++ b/docs/obs/umn/obs_03_0302.html
@@ -10,11 +10,11 @@
- Creating a Bucket
-- Uploading a File
+ - Uploading an Object
-- Downloading a File
+ - Downloading an Object
-- Deleting a File
+ - Deleting an Object
- Deleting a Bucket
diff --git a/docs/obs/umn/obs_03_0304.html b/docs/obs/umn/obs_03_0304.html
index a9cf45f0..58c5e523 100644
--- a/docs/obs/umn/obs_03_0304.html
+++ b/docs/obs/umn/obs_03_0304.html
@@ -7,6 +7,7 @@
Procedure- Log in to the management console with your account.
- On the top menu bar, choose Service List > Management & Deployment > Identity and Access Management. The IAM console is displayed.
- Create a user group and assign OBS permissions to it.
A user group is a collection of users. By assigning permissions to a user group, you assign permissions to the users in this group. After you create an IAM user, add it to one or more user groups, so that it can inherit the permissions from the groups. - In the navigation pane, choose User Groups. The User Groups page is displayed.
- Click Create User Group.
- Enter a user group name and click OK.
The user group is displayed in the user group list once the creation is complete.
- Locate the user group you created and click Modify in the Operation column of the row.
- In the Group Permissions area, locate OBS (S3), click Attach Policy in the Operation column, select the policy name, and click OK.
In the Policy Information area, you can view the details about the policy.
+ Due to data caching, an RBAC policy and fine-grained policy involving OBS actions will take effect 10 to 15 minutes after it is attached to a user and user group.
An account can create a maximum of 100 buckets and parallel file systems.
Procedure- In the upper right corner of the OBS Console homepage, click Create Bucket. The Create Bucket page is displayed. For details, see Figure 1.
Figure 1 Creating a bucket
+
- Configure bucket parameters.
Table 1 Bucket parametersParameter
|
diff --git a/docs/obs/umn/obs_03_0307.html b/docs/obs/umn/obs_03_0307.html
index 953a6382..1ffdec8e 100644
--- a/docs/obs/umn/obs_03_0307.html
+++ b/docs/obs/umn/obs_03_0307.html
@@ -1,6 +1,6 @@
-Uploading a File
+Uploading an Object
This section describes how to upload local files to OBS over the Internet. These files can be texts, images, videos, or any other type of files.
OBS Console allows you to upload files in a batch. Up to 100 files can be uploaded at a time, with the total size of no more than 5 GB. If the file size exceeds 5 GB, use OBS Browser or the multipart upload of OBS SDKs and APIs for upload.
If versioning is disabled for your bucket and you upload a new file with the same name as the one you previously uploaded to your bucket, the new file automatically overwrites the previous file and does not retain its ACL information. If you upload a new folder using the same name that was used with a previous folder in the bucket, the two folders will be merged, and files in the new folder will overwrite namesake files in the previous folder.
@@ -15,7 +15,7 @@
- Select a storage class. If you do not specify a storage class, the object you upload inherits the default storage class of the bucket.
An object can have a different storage class from its bucket. You can specify a storage class for an object when uploading it, or you can change the object storage class after the object is uploaded.
- Add a file or folder to be uploaded by dragging it to the Upload Object area.
You can also click add file in the Upload Object area to select files.
- - (Optional) Select KMS encryption to encrypt the uploaded file. For details, see Uploading a File in Server-Side Encryption Mode.
If the default encryption has been enabled for the bucket, uploaded objects are automatically encrypted.
+ - (Optional) Select KMS encryption to encrypt the uploaded file. For details, see Uploading an Object in Server-Side Encryption Mode.
If the default encryption has been enabled for the bucket, uploaded objects are automatically encrypted.
- Click Upload.
diff --git a/docs/obs/umn/obs_03_0308.html b/docs/obs/umn/obs_03_0308.html
index 51b5c65e..b3de1dac 100644
--- a/docs/obs/umn/obs_03_0308.html
+++ b/docs/obs/umn/obs_03_0308.html
@@ -1,10 +1,10 @@
- Downloading a File
+ Downloading an Object
You can download files from OBS Console to your local computer.
Limitations and ConstraintsObjects in the Cold storage class can be downloaded only when they are in the Restored state.
- Procedure- In the bucket list, click the bucket you want to operate. The Overview page of the bucket is displayed.
- In the navigation pane, click Objects.
- Select the files you want to download, and then click Download or More > Download As to download the files.
In the Download As dialog box, right-click the object and choose Copy Link Address from the shortcut menu to obtain the download link address of the object.
+ Procedure- In the bucket list, click the bucket you want to operate. The Overview page of the bucket is displayed.
- In the navigation pane, click Objects.
- Select the files you want to download, and then click Download or More > Download As to download the files.
In the Download As dialog box, right-click the object and choose Copy Link Address from the shortcut menu to obtain the object's download address.
diff --git a/docs/obs/umn/obs_03_0309.html b/docs/obs/umn/obs_03_0309.html
index 73e7bd5c..09dc30b9 100644
--- a/docs/obs/umn/obs_03_0309.html
+++ b/docs/obs/umn/obs_03_0309.html
@@ -1,11 +1,14 @@
- Deleting a File
+ Deleting an Object
You can delete unnecessary files one by one or in a batch on OBS Console to save space and money.
- Procedure- In the bucket list, click the bucket you want to operate. The Overview page of the bucket is displayed.
- In the navigation pane, choose Objects.
- Select the file you want to delete, and choose More > Delete on the right.
You can select multiple files and click Delete above the file list to batch delete the files.
+Procedure- In the bucket list, click the bucket you want to operate. The Overview page of the bucket is displayed.
- In the navigation pane, choose Objects.
- Select the file you want to delete, and choose More > Delete on the right.
You can select multiple files and click Delete above the file list to batch delete the files.
- Click Yes to confirm the deletion.
The object deletion task is displayed in the Task Management window.
Important NotesIn big data scenarios, parallel file systems usually have deep directory levels and each directory has a large number of files. In such case, deleting directories from parallel file systems may fail due to timeout. To address this problem, you are advised to delete directories in either of the following ways:
+ - On the Hadoop client that has OBSA, an OBS client plugin, embedded, run the hadoop fs - rmr obs://{Name of a parallel file system}/{Directory name} command.
- Configure a lifecycle rule for directories so that they can be deleted in background based on the preset lifecycle rule.
+
diff --git a/docs/obs/umn/obs_03_0315.html b/docs/obs/umn/obs_03_0315.html
index 15f0f984..c8f66261 100644
--- a/docs/obs/umn/obs_03_0315.html
+++ b/docs/obs/umn/obs_03_0315.html
@@ -6,21 +6,21 @@
|---|
-2023-05-04
+ | 2023-07-04
+ |
+Updated the following contents:
+
+ |
+
+2023-06-20
+ |
+Updated the following contents:
+
+ |
+
+2023-05-04
|
Updated the following contents:
@@ -29,7 +41,7 @@
| 2021-06-17
|
Updated the following contents:
-
+
|
2021-06-03
diff --git a/docs/obs/umn/obs_faq_0031.html b/docs/obs/umn/obs_faq_0031.html
index baf1a6f0..1d26d28d 100644
--- a/docs/obs/umn/obs_faq_0031.html
+++ b/docs/obs/umn/obs_faq_0031.html
@@ -1,7 +1,7 @@
How Do I Obtain the Access Path to an Object?
-Object access paths use the following format: https://{bucket name}.{domain name}/{object name}, for example, https://bucketname.obs.eu-de.otc.t-systems.com/objectname.
+ Object access paths use the following format: https://{bucket name}.{domain name}/{object name}, for example, https://bucketname.obs.eu-de.otc.t-systems.com/objectname.
You can combine a path manually or use the tools in the following table to obtain it.
Table 1 How to obtain an object URLTool
diff --git a/docs/obs/umn/obs_faq_0044.html b/docs/obs/umn/obs_faq_0044.html
index c8a3efd0..4a190978 100644
--- a/docs/obs/umn/obs_faq_0044.html
+++ b/docs/obs/umn/obs_faq_0044.html
@@ -2,9 +2,9 @@
What Encryption Technologies Can I Use to Encrypt Data on OBS?
Before uploading your data to OBS, you can encrypt the data to ensure security during transmission and storage. OBS support various encryption technologies used on clients.
- OBS allows users to encrypt objects using server-side encryption so that the objects can be securely stored on OBS.
- The objects to be uploaded can be encrypted using SSE-KMS. You need to create a key using KMS or use the default key provided by KMS. Then you can use the KMS key to perform server-side encryption when uploading objects on OBS.
- After server-side encryption is enabled, objects to be uploaded will be encrypted and stored on the server. When downloading the encrypted objects, the encrypted data will be decrypted on the server and displayed in plaintext to users.
+ OBS allows you to encrypt objects with server-side encryption so that the objects can be securely stored in OBS.
+ The objects to be uploaded can be encrypted using SSE-KMS. You need to create a key using KMS or use the default key provided by KMS. Then you can use the KMS key to perform server-side encryption when uploading objects to OBS.
+ After server-side encryption is enabled, objects to be uploaded will be encrypted and stored on the server. When objects are downloaded, they will be decrypted on the server first and then returned in plaintext to you.
OBS provides SSE-KMS and SSE-C that can be configured by calling APIs. With SSE-C, OBS uses the customer-provided keys and their MD5 values for server-side encryption.
diff --git a/docs/obs/umn/obs_faq_0100.html b/docs/obs/umn/obs_faq_0100.html
index c35db7bc..12ef6c06 100644
--- a/docs/obs/umn/obs_faq_0100.html
+++ b/docs/obs/umn/obs_faq_0100.html
@@ -14,6 +14,8 @@
- How Much Data Can I Store in OBS?
+ - Does OBS Support Traffic Monitoring?
+
- Can Folders in OBS Be Used the Same Way as in a File System?
- Where Is Data Stored in OBS?
diff --git a/docs/obs/umn/obs_faq_0111.html b/docs/obs/umn/obs_faq_0111.html
new file mode 100644
index 00000000..37c52bc3
--- /dev/null
+++ b/docs/obs/umn/obs_faq_0111.html
@@ -0,0 +1,128 @@
+
+
+Does OBS Support Traffic Monitoring?
+Yes.
+ On Cloud Eye, you can monitor the OBS metrics described in the following table.
+
+ Metric ID
+ |
+Metric
+ |
+Description
+ |
+Value Range
+ |
+Monitored Entity
+ |
+Monitoring Period (Original Metric)
+ |
+
|---|
+
+download_bytes
+ |
+Bytes Downloaded
+ |
+Specifies the response bytes of all download requests made to all buckets in a region, including bytes in HTTP entity bodies.
+Unit: byte
+ |
+≥ 0 bytes
+ |
+Bucket
+ |
+5 min
+ |
+
+upload_bytes
+ |
+Bytes Uploaded
+ |
+Specifies the bytes of all upload requests made to all buckets in a region, including bytes in HTTP entity bodies.
+Unit: byte
+ |
+≥ 0 bytes
+ |
+Bucket
+ |
+5 min
+ |
+
+get_request_count
+ |
+GET Requests
+ |
+Specifies the number of GET, HEAD, or OPTIONS requests made to all buckets and objects in the buckets of a region.
+Unit: count
+ |
+≥ 0 counts
+ |
+Bucket
+ |
+5 min
+ |
+
+put_request_count
+ |
+PUT Requests
+ |
+Specifies the number of PUT, POST, and DELETE requests made to all buckets and objects in the buckets of a region.
+Unit: count
+ |
+≥ 0 counts
+ |
+Bucket
+ |
+5 min
+ |
+
+first_byte_latency
+ |
+First Byte Download Delay
+ |
+Specifies the average time from receiving a GET, HEAD, or OPTIONS request to the time that the system starts to respond in a measurement period.
+Unit: millisecond
+ |
+≥ 0 ms
+ |
+Bucket
+ |
+5 min
+ |
+
+request_count_4xx
+ |
+4xx Errors
+ |
+Specifies the times that the server responds to requests whose error codes are 4xx.
+Unit: count
+ |
+≥ 0 counts
+ |
+Bucket
+ |
+5 min
+ |
+
+request_count_5xx
+ |
+5xx Errors
+ |
+Specifies the times that the server responds to requests whose error codes are 5xx.
+Unit: count
+ |
+≥ 0 counts
+ |
+Bucket
+ |
+5 min
+ |
+
+
+
+
+ |
|---|
|
| |
|---|
|
|---|
|
|
|---|
|
|---|
|
