POST
/
api
/
v1
/
open
/
objects
/
resources
Create object resource policy
curl --request POST \
  --url https://api.example.com/api/v1/open/objects/resources \
  --header 'Content-Type: application/json' \
  --header 'X-Api-Id: <x-api-id>' \
  --header 'X-Api-Nonce: <x-api-nonce>' \
  --header 'X-Api-Signature: <api-key>' \
  --header 'X-Api-Timestamp: <x-api-timestamp>' \
  --data '
{
  "bucket": "tenant-media",
  "credential_id": "7c75b0b8-85bb-4f86-82e8-9554a74e7f9f",
  "key_prefix": "tenant_001/uploads/",
  "allowed_methods": [
    "PUT"
  ],
  "max_presign_ttl_seconds": 900,
  "status": "ACTIVE"
}
'
{
  "resource_id": "8b8c4f1a-0c3f-4f1b-b1ab-661fd5c7b333",
  "tenant_id": "tenant_001",
  "bucket": "tenant-media",
  "credential_id": "7c75b0b8-85bb-4f86-82e8-9554a74e7f9f",
  "key_prefix": "tenant_001/uploads/",
  "allowed_methods": [
    "PUT"
  ],
  "max_presign_ttl_seconds": 900,
  "status": "ACTIVE",
  "request_id": "req-001"
}

Authorizations

​
X-Api-Signature
string
header
required

HMAC signature; X-Api-Id, X-Api-Timestamp, and X-Api-Nonce are also required.

Headers

​
X-Api-Id
string
required

API credential ID.

​
X-Api-Timestamp
string
required

Unix timestamp in seconds.

​
X-Api-Nonce
string
required

Replay-protection nonce.

​
X-Api-Signature
string
required

HMAC request signature.

​
X-Request-Id
string

Optional correlation ID.

Body

application/json
​
bucket
string
required
Example:

"tenant-media"

​
key_prefix
string
required
Example:

"tenant_001/uploads/"

​
allowed_methods
enum<string>[]
required
Available options:
GET,
PUT
Example:
["PUT"]
​
max_presign_ttl_seconds
integer
required
Required range: 1 <= x <= 3600
Example:

900

​
status
enum<string>
required
Available options:
ACTIVE,
DISABLED
Example:

"ACTIVE"

​
credential_id
string<uuid>

Response

Resource created.

​
resource_id
string<uuid>
required
​
tenant_id
string
required
​
bucket
string
required
​
key_prefix
string
required
​
allowed_methods
string[]
required
​
max_presign_ttl_seconds
integer
required
​
status
enum<string>
required
Available options:
ACTIVE,
DISABLED
Example:

"ACTIVE"

​
request_id
string
required
​
credential_id
string<uuid>