Skip to content

/AWS1/CL_LSAACCESSRULES

Describes the anonymous access permissions for an Amazon Lightsail bucket and its objects.

For more information about bucket access permissions, see Understanding bucket permissions in Amazon Lightsail in the

Amazon Lightsail Developer Guide.

CONSTRUCTOR

IMPORTING

Optional arguments:

iv_getobject TYPE /AWS1/LSAACCESSTYPE /AWS1/LSAACCESSTYPE

Specifies the anonymous access to all objects in a bucket.

The following options can be specified:

  • public - Sets all objects in the bucket to public (read-only), making them readable by anyone in the world.

    If the getObject value is set to public, then all objects in the bucket default to public regardless of the allowPublicOverrides value.

  • private - Sets all objects in the bucket to private, making them readable only by you or anyone you give access to.

    If the getObject value is set to private, and the allowPublicOverrides value is set to true, then all objects in the bucket default to private unless they are configured with a public-read ACL. Individual objects with a public-read ACL are readable by anyone in the world.

iv_allowpublicoverrides TYPE /AWS1/LSABOOLEAN /AWS1/LSABOOLEAN

A Boolean value that indicates whether the access control list (ACL) permissions that are applied to individual objects override the getObject option that is currently specified.

When this is true, you can use the PutObjectAcl Amazon S3 API action to set individual objects to public (read-only) using the public-read ACL, or to private using the private ACL.


Queryable Attributes

getObject

Specifies the anonymous access to all objects in a bucket.

The following options can be specified:

  • public - Sets all objects in the bucket to public (read-only), making them readable by anyone in the world.

    If the getObject value is set to public, then all objects in the bucket default to public regardless of the allowPublicOverrides value.

  • private - Sets all objects in the bucket to private, making them readable only by you or anyone you give access to.

    If the getObject value is set to private, and the allowPublicOverrides value is set to true, then all objects in the bucket default to private unless they are configured with a public-read ACL. Individual objects with a public-read ACL are readable by anyone in the world.

Accessible with the following methods

Method Description
GET_GETOBJECT() Getter for GETOBJECT, with configurable default
ASK_GETOBJECT() Getter for GETOBJECT w/ exceptions if field has no value
HAS_GETOBJECT() Determine if GETOBJECT has a value

allowPublicOverrides

A Boolean value that indicates whether the access control list (ACL) permissions that are applied to individual objects override the getObject option that is currently specified.

When this is true, you can use the PutObjectAcl Amazon S3 API action to set individual objects to public (read-only) using the public-read ACL, or to private using the private ACL.

Accessible with the following methods

Method Description
GET_ALLOWPUBLICOVERRIDES() Getter for ALLOWPUBLICOVERRIDES, with configurable default
ASK_ALLOWPUBLICOVERRIDES() Getter for ALLOWPUBLICOVERRIDES w/ exceptions if field has n
HAS_ALLOWPUBLICOVERRIDES() Determine if ALLOWPUBLICOVERRIDES has a value