"smart_sources:100-project/Work/市发改委/ref/minio.md": {"path":"100-project/Work/市发改委/ref/minio.md","last_embed":{"hash":null},"embeddings":{},"last_read":{"hash":"qxpavf","at":1766986879323},"class_name":"SmartSource","last_import":{"mtime":1727075023937,"size":15781,"at":1766986879407,"hash":"qxpavf"},"blocks":{"#":[1,6],"##**Table of Contents**":[7,20],"##**Table of Contents**#{1}":[9,9],"##**Table of Contents**#{2}":[10,10],"##**Table of Contents**#{3}":[11,11],"##**Table of Contents**#{4}":[12,12],"##**Table of Contents**#{5}":[13,13],"##**Table of Contents**#{6}":[14,14],"##**Table of Contents**#{7}":[15,15],"##**Table of Contents**#{8}":[16,16],"##**Table of Contents**#{9}":[17,18],"##**Table of Contents**#{10}":[19,20],"##**1. Prerequisites**":[21,31],"##**1. Prerequisites**#{1}":[23,24],"##**1. Prerequisites**#{2}":[25,25],"##**1. Prerequisites**#{3}":[26,26],"##**1. Prerequisites**#{4}":[27,27],"##**1. Prerequisites**#{5}":[28,29],"##**1. Prerequisites**#{6}":[30,31],"##**2. Understanding MinIO Users and Policies**":[32,47],"##**2. Understanding MinIO Users and Policies**#**a. Users**":[34,37],"##**2. Understanding MinIO Users and Policies**#**a. Users**#{1}":[36,37],"##**2. Understanding MinIO Users and Policies**#**b. Policies**":[38,47],"##**2. Understanding MinIO Users and Policies**#**b. Policies**#{1}":[40,41],"##**2. Understanding MinIO Users and Policies**#**b. Policies**#{2}":[42,42],"##**2. Understanding MinIO Users and Policies**#**b. Policies**#{3}":[43,43],"##**2. Understanding MinIO Users and Policies**#**b. Policies**#{4}":[44,45],"##**2. Understanding MinIO Users and Policies**#**b. Policies**#{5}":[46,47],"##**3. Installing and Configuring MinIO Client (`mc`)**":[48,120],"##**3. Installing and Configuring MinIO Client (`mc`)**#{1}":[50,51],"##**3. Installing and Configuring MinIO Client (`mc`)**#**a. Download and Install `mc`**":[52,83],"##**3. Installing and Configuring MinIO Client (`mc`)**#**a. Download and Install `mc`**#{1}":[54,59],"##**3. Installing and Configuring MinIO Client (`mc`)**#**a. Download and Install `mc`**#{2}":[56,59],"##**3. Installing and Configuring MinIO Client (`mc`)**#**a. Download and Install `mc`**#{3}":[60,65],"##**3. Installing and Configuring MinIO Client (`mc`)**#**a. Download and Install `mc`**#{4}":[62,65],"##**3. Installing and Configuring MinIO Client (`mc`)**#**a. Download and Install `mc`**#{5}":[66,71],"##**3. Installing and Configuring MinIO Client (`mc`)**#**a. Download and Install `mc`**#{6}":[68,71],"##**3. Installing and Configuring MinIO Client (`mc`)**#**a. Download and Install `mc`**#{7}":[72,83],"##**3. Installing and Configuring MinIO Client (`mc`)**#**a. Download and Install `mc`**#{8}":[74,83],"##**3. Installing and Configuring MinIO Client (`mc`)**#**b. Configure `mc` to Connect to Your MinIO Server**":[84,120],"##**3. Installing and Configuring MinIO Client (`mc`)**#**b. Configure `mc` to Connect to Your MinIO Server**#{1}":[86,87],"##**3. Installing and Configuring MinIO Client (`mc`)**#**b. Configure `mc` to Connect to Your MinIO Server**#{2}":[88,99],"##**3. Installing and Configuring MinIO Client (`mc`)**#**b. Configure `mc` to Connect to Your MinIO Server**#{3}":[100,120],"##**3. Installing and Configuring MinIO Client (`mc`)**#**b. Configure `mc` to Connect to Your MinIO Server**#{4}":[102,120],"##**4. Creating a Full Access Policy**":[121,194],"##**4. Creating a Full Access Policy**#{1}":[123,124],"##**4. Creating a Full Access Policy**#**a. Define the Policy JSON**":[125,162],"##**4. Creating a Full Access Policy**#**a. Define the Policy JSON**#{1}":[127,132],"##**4. Creating a Full Access Policy**#**a. Define the Policy JSON**#{2}":[129,132],"##**4. Creating a Full Access Policy**#**a. Define the Policy JSON**#{3}":[133,158],"##**4. Creating a Full Access Policy**#**a. Define the Policy JSON**#{4}":[135,158],"##**4. Creating a Full Access Policy**#**a. Define the Policy JSON**#{5}":[159,162],"##**4. Creating a Full Access Policy**#**b. Validate the Policy JSON**":[163,172],"##**4. Creating a Full Access Policy**#**b. Validate the Policy JSON**#{1}":[165,172],"##**4. Creating a Full Access Policy**#**c. Create the Policy in MinIO**":[173,194],"##**4. Creating a Full Access Policy**#**c. Create the Policy in MinIO**#{1}":[175,194],"##**5. Creating the API User and Assigning the Policy**":[195,265],"##**5. Creating the API User and Assigning the Policy**#{1}":[197,198],"##**5. Creating the API User and Assigning the Policy**#**a. Create the API User**":[199,243],"##**5. Creating the API User and Assigning the Policy**#**a. Create the API User**#{1}":[201,202],"##**5. Creating the API User and Assigning the Policy**#**a. Create the API User**#**Method 1: Manual Key Generation**":[203,225],"##**5. Creating the API User and Assigning the Policy**#**a. Create the API User**#**Method 1: Manual Key Generation**#{1}":[205,211],"##**5. Creating the API User and Assigning the Policy**#**a. Create the API User**#**Method 1: Manual Key Generation**#{2}":[207,211],"##**5. Creating the API User and Assigning the Policy**#**a. Create the API User**#**Method 1: Manual Key Generation**#{3}":[212,225],"##**5. Creating the API User and Assigning the Policy**#**a. Create the API User**#**Method 1: Manual Key Generation**#{4}":[214,225],"##**5. Creating the API User and Assigning the Policy**#**a. Create the API User**#**Method 2: Using MinIO Client (`mc`) to Create User with Keys**":[226,243],"##**5. Creating the API User and Assigning the Policy**#**a. Create the API User**#**Method 2: Using MinIO Client (`mc`) to Create User with Keys**#{1}":[228,243],"##**5. Creating the API User and Assigning the Policy**#**b. Attach the Policy to the User**":[244,265],"##**5. Creating the API User and Assigning the Policy**#**b. Attach the Policy to the User**#{1}":[246,265],"##**6. Verifying the API User**":[266,382],"##**6. Verifying the API User**#{1}":[268,269],"##**6. Verifying the API User**#**a. List Users**":[270,289],"##**6. Verifying the API User**#**a. List Users**#{1}":[272,289],"##**6. Verifying the API User**#**b. Test Access with API User Credentials**":[290,382],"##**6. Verifying the API User**#**b. Test Access with API User Credentials**#{1}":[292,293],"##**6. Verifying the API User**#**b. Test Access with API User Credentials**#{2}":[294,305],"##**6. Verifying the API User**#**b. Test Access with API User Credentials**#{3}":[296,305],"##**6. Verifying the API User**#**b. Test Access with API User Credentials**#{4}":[306,318],"##**6. Verifying the API User**#**b. Test Access with API User Credentials**#{5}":[308,318],"##**6. Verifying the API User**#**b. Test Access with API User Credentials**#{6}":[319,330],"##**6. Verifying the API User**#**b. Test Access with API User Credentials**#{7}":[321,330],"##**6. Verifying the API User**#**b. Test Access with API User Credentials**#{8}":[331,342],"##**6. Verifying the API User**#**b. Test Access with API User Credentials**#{9}":[333,342],"##**6. Verifying the API User**#**b. Test Access with API User Credentials**#{10}":[343,354],"##**6. Verifying the API User**#**b. Test Access with API User Credentials**#{11}":[345,354],"##**6. Verifying the API User**#**b. Test Access with API User Credentials**#{12}":[355,366],"##**6. Verifying the API User**#**b. Test Access with API User Credentials**#{13}":[357,366],"##**6. Verifying the API User**#**b. Test Access with API User Credentials**#{14}":[367,382],"##**6. Verifying the API User**#**b. Test Access with API User Credentials**#{15}":[369,382],"##**7. Best Practices**":[383,419],"##**7. Best Practices**#{1}":[385,386],"##**7. Best Practices**#**a. Principle of Least Privilege**":[387,393],"##**7. Best Practices**#**a. Principle of Least Privilege**#{1}":[389,389],"##**7. Best Practices**#**a. Principle of Least Privilege**#{2}":[390,391],"##**7. Best Practices**#**a. Principle of Least Privilege**#{3}":[392,393],"##**7. Best Practices**#**b. Regularly Rotate Credentials**":[394,398],"##**7. Best Practices**#**b. Regularly Rotate Credentials**#{1}":[396,396],"##**7. Best Practices**#**b. Regularly Rotate Credentials**#{2}":[397,398],"##**7. Best Practices**#**c. Use Strong, Unique Credentials**":[399,403],"##**7. Best Practices**#**c. Use Strong, Unique Credentials**#{1}":[401,401],"##**7. Best Practices**#**c. Use Strong, Unique Credentials**#{2}":[402,403],"##**7. Best Practices**#**d. Monitor and Audit User Activities**":[404,408],"##**7. Best Practices**#**d. Monitor and Audit User Activities**#{1}":[406,406],"##**7. Best Practices**#**d. Monitor and Audit User Activities**#{2}":[407,408],"##**7. Best Practices**#**e. Secure Storage of Credentials**":[409,413],"##**7. Best Practices**#**e. Secure Storage of Credentials**#{1}":[411,411],"##**7. Best Practices**#**e. Secure Storage of Credentials**#{2}":[412,413],"##**7. Best Practices**#**f. Limit User Lifespans**":[414,419],"##**7. Best Practices**#**f. Limit User Lifespans**#{1}":[416,417],"##**7. Best Practices**#**f. Limit User Lifespans**#{2}":[418,419],"##**8. Example: Creating an API User with Full Access**":[420,591],"##**8. Example: Creating an API User with Full Access**#{1}":[422,423],"##**8. Example: Creating an API User with Full Access**#**Step 1: Define the Full Access Policy**":[424,462],"##**8. Example: Creating an API User with Full Access**#**Step 1: Define the Full Access Policy**#{1}":[426,431],"##**8. Example: Creating an API User with Full Access**#**Step 1: Define the Full Access Policy**#{2}":[428,431],"##**8. Example: Creating an API User with Full Access**#**Step 1: Define the Full Access Policy**#{3}":[432,450],"##**8. Example: Creating an API User with Full Access**#**Step 1: Define the Full Access Policy**#{4}":[434,450],"##**8. Example: Creating an API User with Full Access**#**Step 1: Define the Full Access Policy**#{5}":[451,454],"##**8. Example: Creating an API User with Full Access**#**Step 1: Define the Full Access Policy**#{6}":[455,462],"##**8. Example: Creating an API User with Full Access**#**Step 1: Define the Full Access Policy**#{7}":[457,462],"##**8. Example: Creating an API User with Full Access**#**Step 2: Add the Policy to MinIO**":[463,474],"##**8. Example: Creating an API User with Full Access**#**Step 2: Add the Policy to MinIO**#{1}":[465,474],"##**8. Example: Creating an API User with Full Access**#**Step 3: Create the API User**":[475,506],"##**8. Example: Creating an API User with Full Access**#**Step 3: Create the API User**#{1}":[477,492],"##**8. Example: Creating an API User with Full Access**#**Step 3: Create the API User**#{2}":[479,492],"##**8. Example: Creating an API User with Full Access**#**Step 3: Create the API User**#{3}":[493,506],"##**8. Example: Creating an API User with Full Access**#**Step 3: Create the API User**#{4}":[495,506],"##**8. Example: Creating an API User with Full Access**#**Step 4: Test the API User**":[507,591],"##**8. Example: Creating an API User with Full Access**#**Step 4: Test the API User**#{1}":[509,514],"##**8. Example: Creating an API User with Full Access**#**Step 4: Test the API User**#{2}":[511,514],"##**8. Example: Creating an API User with Full Access**#**Step 4: Test the API User**#{3}":[515,527],"##**8. Example: Creating an API User with Full Access**#**Step 4: Test the API User**#{4}":[517,527],"##**8. Example: Creating an API User with Full Access**#**Step 4: Test the API User**#{5}":[528,539],"##**8. Example: Creating an API User with Full Access**#**Step 4: Test the API User**#{6}":[530,539],"##**8. Example: Creating an API User with Full Access**#**Step 4: Test the API User**#{7}":[540,551],"##**8. Example: Creating an API User with Full Access**#**Step 4: Test the API User**#{8}":[542,551],"##**8. Example: Creating an API User with Full Access**#**Step 4: Test the API User**#{9}":[552,563],"##**8. Example: Creating an API User with Full Access**#**Step 4: Test the API User**#{10}":[554,563],"##**8. Example: Creating an API User with Full Access**#**Step 4: Test the API User**#{11}":[564,575],"##**8. Example: Creating an API User with Full Access**#**Step 4: Test the API User**#{12}":[566,575],"##**8. Example: Creating an API User with Full Access**#**Step 4: Test the API User**#{13}":[576,591],"##**8. Example: Creating an API User with Full Access**#**Step 4: Test the API User**#{14}":[578,591],"##**9. Additional Resources**":[592,612],"##**9. Additional Resources**#{1}":[594,598],"##**9. Additional Resources**#{2}":[599,601],"##**9. Additional Resources**#{3}":[602,606],"##**9. Additional Resources**#{4}":[607,610],"##**9. Additional Resources**#{5}":[611,612],"##**Conclusion**":[613,627],"##**Conclusion**#{1}":[615,618],"##**Conclusion**#{2}":[619,620],"##**Conclusion**#{3}":[621,622],"##**Conclusion**#{4}":[623,624],"##**Conclusion**#{5}":[625,627]},"outlinks":[{"title":"Prerequisites","target":"#prerequisites","line":9},{"title":"Understanding MinIO Users and Policies","target":"#understanding-minio-users-and-policies","line":10},{"title":"Installing and Configuring MinIO Client (`mc`)","target":"#installing-and-configuring-minio-client-mc","line":11},{"title":"Creating a Full Access Policy","target":"#creating-a-full-access-policy","line":12},{"title":"Creating the API User and Assigning the Policy","target":"#creating-the-api-user-and-assigning-the-policy","line":13},{"title":"Verifying the API User","target":"#verifying-the-api-user","line":14},{"title":"Best Practices","target":"#best-practices","line":15},{"title":"Example: Creating an API User with Full Access","target":"#example-creating-an-api-user-with-full-access","line":16},{"title":"Additional Resources","target":"#additional-resources","line":17},{"title":"JSONLint","target":"https://jsonlint.com/","line":165},{"title":"AWS Secrets Manager","target":"https://aws.amazon.com/secrets-manager/","line":411},{"title":"Kubernetes Secrets","target":"https://kubernetes.io/docs/concepts/configuration/secret/","line":411},{"title":"HashiCorp Vault","target":"https://www.vaultproject.io/","line":411},{"title":"MinIO Client (`mc`) Quickstart Guide","target":"https://docs.min.io/docs/minio-client-quickstart-guide.html","line":595},{"title":"MinIO Admin API","target":"https://docs.min.io/docs/minio-admin-complete-guide.html","line":596},{"title":"MinIO Policy Documentation","target":"https://docs.min.io/docs/minio-policy-guide.html","line":597},{"title":"MinIO Security Best Practices","target":"https://docs.min.io/docs/minio-security.html","line":600},{"title":"HashiCorp Vault","target":"https://www.vaultproject.io/","line":603},{"title":"AWS Secrets Manager","target":"https://aws.amazon.com/secrets-manager/","line":604},{"title":"Kubernetes Secrets","target":"https://kubernetes.io/docs/concepts/configuration/secret/","line":605},{"title":"MinIO GitHub Repository","target":"https://github.com/minio/minio","line":608},{"title":"MinIO Community Slack","target":"https://slack.min.io/","line":609},{"title":"MinIO documentation","target":"https://docs.min.io/","line":627},{"title":"MinIO community","target":"https://min.io/community.html","line":627}],"task_lines":[],"tasks":{},"codeblock_ranges":[[56,58],[62,64],[68,70],[74,76],[80,82],[90,92],[96,98],[102,104],[108,111],[129,131],[135,150],[167,169],[177,179],[183,185],[189,191],[207,210],[214,217],[221,224],[230,232],[236,238],[248,250],[254,256],[260,262],[272,274],[278,280],[284,288],[296,298],[302,304],[308,310],[314,317],[321,323],[327,329],[333,335],[339,341],[345,347],[351,353],[357,359],[363,365],[369,371],[375,377],[428,430],[434,449],[457,459],[465,467],[471,473],[479,484],[488,491],[495,498],[502,505],[511,513],[517,519],[523,526],[530,532],[536,538],[542,544],[548,550],[554,556],[560,562],[566,568],[572,574],[578,580],[584,586]]},