International Business Machines Corporation

Nicholas Georg Lange

Harsha Hegde

Amit H Lamba

Michael E Lyons

Shibhani Rai

A method for execution by an access layer of an object storage system includes In various embodiments, a processing system of an access layer of an object storage system includes at least one processor and a memory that stores operational instructions, that when executed by the at least one processor cause the processing system to receive a request message from a requesting entity via a network, where the request message includes a pre-signed URL. A set of custom policy parameters are extracted from the pre-signed URL. Policy verification data is generated by comparing each attribute of a determined set of attributes of the access request to a corresponding custom policy parameter of the set of custom policy parameters. An access indicated in the request message is executed in response to the policy verification data indicating that each attribute compares favorably to the corresponding custom policy parameter.

Pre-signed URLs with custom policies for data access in an object storage system

Methods and systems for data governance in a dispersed storage network using bucket templates are disclosed. A method includes: creating, by a computing device, a bucket template in a dispersed storage network (DSN) based on a first request, the bucket template including at least a first bucket parameter and at least one allowed value for the first bucket parameter; receiving, by the computing device, a second request to create a bucket in the DSN, the second request including at least a first value for the first bucket parameter; and creating, by the computing device, the bucket based on the first value for the first bucket parameter in the second request and the at least one allowed value for the first bucket parameter in the bucket template.

Growing community of inventors

Chicago, IL, United States of America

Nicholas Georg Lange