Because of the same-origin policy in browsers, cross-origin requests may be rejected when data is exchanged or resources are shared between different domain names. This topic describes how to configure cross-origin resource sharing (CORS) rules. In the CORS rules, you can specify the allowed origin domain names, request methods, and headers.
Notes
The sample code in this topic uses the region ID
cn-hangzhou
for the China (Hangzhou) region. By default, a public endpoint is used to access resources in a bucket. If you want to access resources in the bucket from other Alibaba Cloud services in the same region, use an internal endpoint. For more information about the regions and endpoints supported by OSS, see OSS regions and endpoints.To configure CORS rules, you must have the
oss:PutBucketCors
permission. To query CORS rules, you must have theoss:GetBucketCors
permission. To delete CORS rules, you must have theoss:DeleteBucketCors
permission. For more information, see Grant custom policy to RAM users.
Method definition
Configure CORS rules
put_bucket_cors(request: PutBucketCorsRequest, **kwargs) → PutBucketCorsResult
Query CORS rules
get_bucket_cors(request: GetBucketCorsRequest, **kwargs) → GetBucketCorsResult
Delete CORS rules
delete_bucket_cors(request: DeleteBucketCorsRequest, **kwargs) → DeleteBucketCorsResult
Request parameters
Parameter | Type | Description |
request | PutBucketCorsRequest | The request parameter. For more information, see PutBucketCorsRequest |
GetBucketCorsRequest | The request parameter. For more information, see GetBucketCorsRequest | |
DeleteBucketCorsRequest | The request parameter. For more information, see DeleteBucketCorsRequest |
Response parameters
Type | Description |
PutBucketCorsResult | The return value. For more information, see PutBucketCorsResult |
GetBucketCorsResult | The return value. For more information, see GetBucketCorsResult |
DeleteBucketCorsResult | The return value. For more information, see DeleteBucketCorsResult |
For more information about configuring CORS rules, see put_bucket_cors.
For more information about querying CORS rules, see get_bucket_cors.
For more information about deleting CORS rules, see delete_bucket_cors.
Sample code
References
For more information about troubleshooting common CORS configuration errors, see 34-CORS.
For the complete sample code to configure CORS rules, see put_bucket_cors.py.
For the complete sample code to query CORS rules, see get_bucket_cors.py.
For the complete sample code to delete CORS rules, see delete_bucket_cors.py.