设置存储桶策略

func (s *BucketService) PutPolicy(ctx context.Context, opt *BucketPutPolicyOptions) (*Response, error)

type BucketPutPolicyOptions struct {
    Statement []BucketStatement
    Version   string
    Principal map[string][]string
}

type BucketStatement struct {
    Principal map[string][]string
    Action    []string
    Effect    string
    Resource  []string
    Condition map[string]map[string]interface{}
    Sid       string
}

package main

import (
    "context"
    "log"
    "net/http"
    "net/url"
    "os"
    "time"

    "github.com/tencentyun/cos-go-sdk-v5"
)

func main() {
    u, _ := url.Parse("https://examplebucket-x--1250000000.cosrapid.ap-guangzhou.myqcloud.com")
    b := &cos.BaseURL{BucketURL: u}
    base := &cos.AuthorizationTransport{
        SecretID:  os.Getenv("SECRETID"),
        SecretKey: os.Getenv("SECRETKEY"),
    }
    c := cos.NewClient(b, &http.Client{
        Transport: cos.NewRapidCredentialTransport(base),
        Timeout:   30 * time.Second,
    })

    ctx := context.Background()
    opt := &cos.BucketPutPolicyOptions{
        Version: "2.0",
        Statement: []cos.BucketStatement{
            {
                Sid:    "allow-get-and-session",
                Effect: "allow",
                Principal: map[string][]string{
                    "qcs": {"qcs::cam::uin/100000000001:uin/100000000011"},
                },
                Action: []string{
                    "name/cos:CreateSession",
                    "name/cos:GetObject",
                },
                Resource: []string{
                    "qcs::cosrapid:ap-guangzhou:uid/1250000000:examplebucket-x--1250000000/*",
                },
            },
        },
    }
    _, err := c.Bucket.PutPolicy(ctx, opt)
    if err != nil {
        log.Fatalf("PutPolicy failed: %v", err)
    }
    log.Println("bucket policy set")
}