Big model-based object storage bucket policy configuration method and device, equipment and medium
By parsing and interactively generating bucket policy configurations in Json format through large models, the problem of complex manual policy writing by users in existing technologies is solved, achieving the effect of simplifying configuration and improving accuracy.
Patent Information
- Application Number
- CN202510028924.0
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- Filing Date
- 2025-01-08
- Publication Date
- 2025-10-10
- Estimated Expiration
- 2045-01-08
AI Technical Summary
The existing object storage bucket policy configuration is complex, and users need to manually write policies in Json format, which makes operation difficult and challenging to understand and set up.
The large model parses the key and bucket name entered by the user, obtains bucket policy information and user information, conducts interactive dialogue to obtain configuration requirements, generates a Json format bucket policy configuration that meets the target conditions, and performs verification and application.
It reduces the complexity of user bucket policy configuration, improves configuration accuracy and efficiency, and lowers the threshold for using object storage.
Smart Images

Figure CN119766572B_ABST
Abstract
Description
TECHNICAL FIELD
[0001] The present application relates to the technical field of distributed storage, in particular to an object storage bucket policy configuration method and device based on a large model, equipment and medium. BACKGROUND
[0002] Object storage is a distributed storage product that can support HTTP (Hypertext Transfer Protocol) / HTTPS (Hypertext Transfer Protocol Secure) protocols natively. As long as the Internet is connected, the object storage service can be directly used. With the development and maturity of object storage, more and more Internet websites and APPs (Application) begin to store some static resources in object storage services, which not only reduces the pressure on the server, but also reduces the cost. Object storage has the characteristics of unlimited expansion and data structure flattening, which makes it possible to store terabytes of data.
[0003] Most of the current object storage services rely on a bucket policy system to manage access rules. Users can add policies to storage buckets to allow or prohibit certain accounts or source IPs (Internet Protocol) (or IP segments) to access the object storage resources set by the policy. This bucket policy system requires users to write a Json (JavaScript Object Notation) format policy for each bucket. When an access comes, the object storage system will first read the policy of the bucket, and then determine whether to allow the access according to the policy. The content of the policy includes authorized persons, unauthorized persons, actions, effectiveness, resources, and effective conditions, and each element has many optional items. There are dozens of operations included in the action element alone, so setting and understanding the bucket policy is a big challenge for users. SUMMARY
[0004] Therefore, the present application aims to provide an object storage bucket policy configuration method and device based on a large model, which can allow users to conveniently and accurately configure the bucket policy and reduce the threshold for users to use object storage. The specific scheme is as follows:
[0005] In a first aspect, the present application discloses an object storage bucket policy configuration method based on a large model, comprising:
[0006] The key and the bucket name input by the user are verified, after successful verification, the object storage corresponding to the user's bucket policy information and user information are obtained, the current configuration of the bucket of the object storage is parsed based on the bucket policy information and the user information through a large model, to obtain parsing information;
[0007] The parsing information is sent to the user, so that the user determines the configuration requirement based on the parsing information, and the configuration requirement is obtained through an interactive dialogue with the user;
[0008] A bucket policy configuration is generated through the bucket policy rule corresponding to the object storage and the configuration requirement, the bucket policy configuration is parsed and verified, if the verification is successful, the corresponding parsed configuration file and the bucket policy configuration are sent to the user;
[0009] After the user determines that the bucket policy configuration meets the target condition, the bucket policy configuration is applied to the bucket of the object storage.
[0010] Optionally, the bucket policy information includes bucket creation time, number of files in the bucket, access control list, cross-domain resource sharing setting, lifecycle management rule and custom domain name; the user information includes account name, account ID, sub-user list and identity recognition and access management permission.
[0011] Optionally, the configuration requirement is obtained through an interactive dialogue with the user, including:
[0012] A plurality of rounds of interactive dialogue are carried out with the user, the text input by the user in each round of interactive dialogue is subjected to semantic analysis, and the corresponding semantic analysis result is sent to the user for verification, and the configuration requirement is determined according to the corresponding verification result; the text and the configuration requirement are both natural languages.
[0013] Optionally, the bucket policy configuration is generated through the bucket policy rule corresponding to the object storage and the configuration requirement, including:
[0014] A policy template is determined according to the configuration requirement, and a Json format bucket policy configuration is generated based on the policy template, the bucket policy rule corresponding to the object storage and the configuration requirement.
[0015] Optionally, the bucket policy configuration is parsed and verified, including:
[0016] The bucket policy configuration is parsed to obtain the content information of each policy item, and the syntax and logic of the content information are verified.
[0017] Optionally, after the bucket policy configuration is parsed and verified, it further includes:
[0018] If the verification fails, a corresponding error report is generated, and the operation of generating the bucket policy configuration is re-executed based on the error report.
[0019] Optionally, after sending the corresponding parsed configuration file and the bucket policy configuration to the user, the method further includes:
[0020] If the user determines that the bucket policy configuration does not meet the target condition, the process jumps back to the step of obtaining the configuration requirement through an interactive dialogue with the user.
[0021] In a second aspect, the present application discloses a large-model-based object storage bucket policy configuration device, comprising:
[0022] A configuration parsing module is used to verify the key and bucket name entered by the user. After successful verification, it obtains the bucket policy information and user information corresponding to the user's object storage, and parses the current configuration of the bucket of the object storage based on the bucket policy information and user information through the big model to obtain parsed information;
[0023] a configuration requirement acquisition module, configured to send the parsed information to the user so that the user can determine the configuration requirement based on the parsed information, and to acquire the configuration requirement through an interactive dialogue with the user;
[0024] A file and configuration sending module is used to generate a bucket policy configuration based on the bucket policy rules corresponding to the object storage and the configuration requirements, parse and verify the bucket policy configuration, and if the verification is successful, send the corresponding parsed configuration file and the bucket policy configuration to the user;
[0025] The bucket policy configuration application module is used to apply the bucket policy configuration to the bucket of the object storage after the user determines that the bucket policy configuration meets the target conditions.
[0026] In a third aspect, the present application discloses an electronic device, comprising:
[0027] Memory, used to store computer programs;
[0028] A processor is used to execute the computer program to implement the object storage bucket policy configuration method based on the big model as described above.
[0029] In a fourth aspect, the present application discloses a computer-readable storage medium for storing a computer program; wherein, when the computer program is executed by a processor, it implements the aforementioned large model-based object storage bucket policy configuration method.
[0030] When configuring the bucket policy of the object storage, this application first verifies the key and bucket name entered by the user. After successful verification, the bucket policy information and user information corresponding to the object storage of the user are obtained, and the current configuration of the bucket of the object storage is parsed based on the bucket policy information and user information through the big model to obtain parsed information; the parsed information is then sent to the user so that the user can determine the configuration requirements based on the parsed information, and the configuration requirements are obtained through interactive dialogue with the user; the bucket policy configuration is then generated through the bucket policy rules corresponding to the object storage and the configuration requirements, and the bucket policy configuration is parsed and verified. If the verification is successful, the corresponding parsed configuration file and the bucket policy configuration are sent to the user; finally, after the user determines that the bucket policy configuration meets the target conditions, the bucket policy configuration is applied to the bucket of the object storage. It can be seen that this application calls the object storage tool through the big model to collect the existing bucket policy information and user information of the object storage, and forms a current status summary and returns it to the user. Then, through dialogue with the user, we guide and understand their bucket policy requirements, generate a bucket policy configuration, and explain it to the user in natural language. After continuous communication and user confirmation, we can configure the user's object storage bucket. This allows users to easily and accurately configure bucket policies, reducing operational complexity and the barrier to entry for users to use object storage. BRIEF DESCRIPTION OF THE DRAWINGS
[0031] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the following briefly introduces the drawings required for use in the embodiments or the description of the prior art. Obviously, the drawings described below are merely embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on the provided drawings without paying any creative work.
[0032] Figure 1 This is a flow chart of a method for configuring an object storage bucket policy based on a large model disclosed in this application;
[0033] Figure 2 This is a flowchart of a specific object storage bucket policy configuration method based on a large model disclosed in this application;
[0034] Figure 3 This is a schematic diagram of the structure of a large-model-based object storage bucket policy configuration device disclosed in this application;
[0035] Figure 4 This is a structural diagram of an electronic device disclosed in this application. DETAILED DESCRIPTION
[0036] With reference to the accompanying drawings and embodiments of the present application, the technical solutions in the embodiments of the present application will be described clearly and completely. Obviously, the described embodiments are only a part of the embodiments of the present application, rather than all the embodiments of the present application. Based on the embodiments in the present application, all other embodiments obtained by those of ordinary skill in the art without creative work fall within the scope of the present application.
[0037] Currently, the bucket policy system requires the user to write a Json format policy for each bucket. When an access comes, the object storage system will first read the policy of the bucket, and then judge whether to allow the access according to the policy. The content of the policy includes authorized persons, unauthorized persons, actions, effectiveness, resources, effective conditions and other elements. Each element has many optional items. There are dozens of operations included in the action element alone. Therefore, it is a great challenge for the user to set and understand the policy of the bucket. In order to solve the above technical problems, the present application discloses an object storage bucket policy configuration method, device and equipment based on a large model and a medium, which can enable users to conveniently and accurately configure bucket policies and reduce the threshold for users to use object storage.
[0038] Referring to Figure 1 The embodiment of the present application discloses an object storage bucket policy configuration method based on a large model, which comprises the following steps:
[0039] Step S11, verify the key and bucket name input by the user. After verification, obtain the object storage corresponding to the user's bucket policy information and user information. Analyze the current configuration of the object storage bucket based on the bucket policy information and user information through a large model to obtain analysis information.
[0040] In this embodiment, the present application calls an object storage service through an API (Application Programming Interface) interface to obtain existing bucket policy information and user information, such as bucket access policies, bucket basic information, parent-child account system, and file status in the bucket. Specifically, first, the secret key of the incoming user is accepted, and the secret key is used to perform user verification with the object storage service, and the verification result is returned. Then, the current policy settings and other basic information of the user object storage bucket are retrieved and obtained by connecting the object storage service. These information includes but is not limited to bucket creation time, number of files in the bucket, access control list, cross-domain resource sharing settings, lifecycle management rules, custom domain name, etc., in order to facilitate subsequent in-depth analysis and configuration of the policy. At the same time, by connecting the object storage service and the corresponding user service, the basic information of the user is collected, including account name, account ID, child user list, IAM (Identity and Access Management) permission, etc. These information helps the module to provide more comprehensive information to the user and more accurately generate a bucket policy that meets the user's needs. It should be noted that the bucket policy refers to the access control policy set by the user for the storage bucket in the object storage system, which defines which users or systems can perform what operations (such as read, write, delete, etc.) on the objects in the bucket. An object is the smallest storage unit in object storage, which can be any data file. There can be up to hundreds of millions of objects in a bucket. When an object is needed, it can be directly downloaded by entering the object name, and the speed is not affected by the increase in the number of objects in the bucket. After obtaining the bucket policy information and user information, the current configuration of the object storage bucket is parsed based on the bucket policy information and user information through a large model, that is, the current situation of the bucket policy is summarized. The large model here refers to a deep learning model with a large number of parameters, usually with tens of billions or even more parameters. These models can handle complex tasks such as natural language processing, image recognition, and recommendation systems, and can provide high-quality results.
[0041] In step S12, the parsed information is sent to the user so that the user determines the configuration requirement based on the parsed information, and the configuration requirement is obtained through an interactive dialogue with the user.
[0042] In this embodiment, the information parsed by the large model is sent to the user, and the user can know the current bucket policy configuration. Then, the user can express his / her requirements and intentions for the bucket policy configuration by using the dialogue generation and understanding capabilities of the large model. After the user inputs the natural language description, the natural language processing capability of the large model is used to perform semantic analysis on the user input text, and the user's requirements are extracted. For example, the user may input "I hope to limit the access of a certain IP segment", and the system needs to identify the two key requirements of "limiting access" and "IP segment". The large model needs to have a comprehensive understanding of the business scenarios of object storage, the basic elements of bucket policy and operation items, which can be achieved by prompt engineering or fine-tuning of the large model. At the same time, in order to fully understand the user's requirements, multiple rounds of dialogue with the user are needed. In each round of dialogue, the question needs to be adjusted according to the user's feedback to gradually clarify the user's specific requirements. For example, the question may be "Please provide the IP segment range you want to limit", and after the user answers, the question continues "What operations do you want to limit for these IP segments?" Through prompt engineering, the user can be guided to fully express his / her ideas about the bucket policy in multiple rounds of dialogue. During the dialogue process, the user needs to be fed back the understanding result in real time and confirm whether it is correct. For example, after the user provides the IP segment information, the feedback may be "Do you want to limit the access permission of IP segment 192.XXX.X.X / XX? Is this correct?" After the user confirms, the next step will be continued. Finally, the user's requirements and intentions are recorded, and the corresponding natural language policy is generated by analyzing these requirements for the next step. The dialogue process can also be optimized according to the historical records to improve the dialogue efficiency. In addition, it should be pointed out that in order to improve the user experience, the present application also supports multiple input methods such as text input and voice input, and can give corresponding prompts and suggestions according to the user's input to help the user express his / her requirements more accurately.
[0043] In step S13, a bucket policy configuration is generated by the bucket policy rule corresponding to the object storage and the configuration requirement, the bucket policy configuration is parsed and verified, and if the verification is successful, the corresponding parsed configuration file and the bucket policy configuration are sent to the user.
[0044] In this embodiment, the application determines the policy template according to the configuration requirements, generates a Json format bucket policy configuration based on the policy template, the bucket policy rules corresponding to the object storage, and the configuration requirements. Specifically, the system of the application pre-designs multiple policy templates, covering common access control requirements. According to the requirements provided by the user, the system selects an appropriate policy template as the basis. For example, for the requirement of "limiting IP access", the "IP access control" template can be selected. When the user's requirements are more complex, the template can not be followed, but the basic rules of the policy can be followed. And the details of the policy template can be dynamically adjusted according to the specific requirements of the user. For example, the user wants to allow access to a specific IP segment but prohibit write operations, and the system will add specific rules for "prohibiting write operations" based on the "IP access control" template. In the final Json format bucket policy file, the system needs to ensure that the generated file must comply with the policy syntax requirements of the object storage service and include all the requirements of the user. For example, a typical Json policy file may include "authorized subject", "permission operation", "resource path", "effective condition", and other parts. In addition, during the generation of the policy file, the corresponding system of the application will be optimized to ensure the simplicity and efficiency of the policy configuration. For example, multiple similar rules can be combined into a more concise rule to improve execution efficiency. In summary, the application generates a Json format bucket policy configuration according to the natural language output of the user's configuration requirements. Combined with the bucket policy rules of the object storage service and the requirements of the user, a bucket policy configuration that meets the requirements is generated. During the generation process, the bucket policy configuration can also be optimized and adjusted to ensure that it meets the user's requirements and complies with the specifications of the object storage service.
[0045] After generating the bucket policy configuration, the generated Json format bucket policy configuration is parsed to extract the specific content of each policy item. For example, the "authorized subject", "permission operation", "resource path", and other information are parsed. The syntax and logical correctness of the policy file are verified. For example, check if the Json file format is correct, if there is a conflict or redundancy between policy items, and ensure that the policy file can be correctly executed by the object storage service. If errors are found during parsing and verification, the system generates a detailed error report and returns it to the bucket policy generation part. For example, prompt that a policy item is configured incorrectly and suggest how to modify it. If the verification is successful and no errors are found, the corresponding parsed configuration file and the bucket policy configuration are sent to the user. In this way, the correctness and effectiveness of the configuration are further ensured.
[0046] Step S14, after the user determines that the bucket policy configuration meets the target condition, the bucket policy configuration is applied to the bucket of the object storage.
[0047] In this embodiment, after the user receives the generated bucket policy configuration and the natural language parsing, the user will confirm again. If the user has other new requirements, the process will jump back to the step of obtaining the configuration requirements through interactive dialogue with the user. The user's intentions and configuration requirements are re-determined to generate a new bucket policy configuration. Finally, the generated bucket policy configuration is applied to the user's object storage bucket, which includes uploading new policy files, modifying existing policies, or deleting policies that are no longer needed to ensure the security and access control of the bucket. Corresponding prompts are given to remind the user that the application is complete. In this way, through multiple interactive dialogues with the user and multiple operations for user confirmation, the user can configure the bucket policy more conveniently and accurately.
[0048] In summary, when configuring the bucket policy of the object storage, the present application first verifies the key and bucket name entered by the user. After successful verification, the bucket policy information and user information corresponding to the object storage of the user are obtained, and the current configuration of the bucket of the object storage is parsed based on the bucket policy information and user information through the big model to obtain parsed information; the parsed information is then sent to the user so that the user can determine the configuration requirements based on the parsed information, and the configuration requirements are obtained through interactive dialogue with the user; the bucket policy configuration is then generated through the bucket policy rules corresponding to the object storage and the configuration requirements, and the bucket policy configuration is parsed and verified. If the verification is successful, the corresponding parsed configuration file and the bucket policy configuration are sent to the user; finally, after the user determines that the bucket policy configuration meets the target conditions, the bucket policy configuration is applied to the bucket of the object storage. It can be seen that the present application calls the object storage tool through the big model to collect the existing bucket policy information and user information of the object storage, and forms a current status summary and returns it to the user. Then, through dialogue with the user, we guide and understand their bucket policy requirements, generate a bucket policy configuration, and explain it to the user in natural language. After continuous communication and user confirmation, we can configure the user's object storage bucket. This allows users to easily and accurately configure bucket policies, reducing operational complexity and the barrier to entry for users to use object storage.
[0049] Based on the previous embodiment, this application discloses a method for configuring object storage bucket policies based on a large model, which allows users to easily and accurately configure bucket policies. The following describes the overall implementation process in detail based on the system corresponding to the method of this application.
[0050] The system corresponding to the present application method is mainly composed of five parts: object storage tool module, user intention confirmation module, bucket policy generation module, bucket policy analysis module and process management module.
[0051] First, the object summary module is a bridge between the system and the object storage service, responsible for implementing interaction functions with the object storage service. As shown in Figure 2 , the object summary module first accepts the incoming user's secret key and uses the key to perform user authentication with the object storage service and returns the authentication result. Then it calls the object storage service through the API interface to obtain existing bucket policy information and user information, such as bucket access policies, basic information of the bucket, parent-child account system, and file status in the bucket. At the same time, this module can also perform configuration operations on the bucket policy, and apply the generated bucket policy configuration to the user's object storage bucket. In addition, this module also has an adaptation layer, through which different object storage service backends can be easily switched. Through this adaptation layer, specific operations are abstracted, so that the upper layer operations are isolated from the actual request at the bottom layer, and the access of new object storage services only needs to adjust the adaptation layer and add adapters, without modifying other parts.
[0052] The user intent confirmation module is the interaction module between the system and the user, which realizes dialogue and communication with the user through natural language processing technology. Using the dialogue generation and understanding capabilities of large models, it guides the user to express their requirements and intentions for bucket policy configuration. After the user inputs a natural language description, this module can analyze the user's intention and convert it into specific bucket policy configuration requirements. In order to improve user experience, this module also supports multiple input methods such as text input and voice input, and can give appropriate prompts and suggestions according to the user's input to help the user express their requirements more accurately.
[0053] The bucket policy generation module is the core part of the system, responsible for generating a Json format bucket policy configuration according to the natural language output of the user intent confirmation module. Combining the bucket policy rules of the object storage service and the user's requirements, it generates a bucket policy configuration that meets the requirements. During the generation process, this module can also optimize and adjust the bucket policy configuration to ensure that it meets the user's requirements and conforms to the specifications of the object storage service.
[0054] The bucket policy analysis module is responsible for analyzing and verifying the generated bucket policy configuration before the user confirms the bucket policy configuration. First, it checks whether the bucket policy configuration conforms to the specifications and requirements of the object storage service, and then performs syntax and semantic analysis to ensure the correctness and effectiveness of the configuration. If problems or errors are found, this module can give prompt and return to the bucket policy generation module in the previous step.
[0055] The flow management module is the central brain of the system, responsible for the management and coordination of the entire bucket policy configuration process. It controls the interaction sequence and data flow between modules to ensure the smooth progress of the entire configuration process. When the user starts to configure the bucket policy, this module first calls the object storage tool module to obtain the existing bucket policy information and user information, and then guides the user to enter the user intent confirmation module to express the demand. After the user confirms the demand, this module passes the demand to the bucket policy generation module for configuration generation, and calls the bucket policy analysis module for configuration analysis and verification. Subsequently, this module sends the generated bucket policy and natural language analysis to the user for confirmation, and if the user has other requirements, it will return to the user intent confirmation module. Finally, this module applies the generated bucket policy configuration to the user's object storage bucket and gives the corresponding prompt.
[0056] In summary, through the cooperative work of the five key components, the present application provides an object storage bucket policy configuration method based on a large model, which can reduce the complexity and threshold of user configuration of bucket policy, improve the configuration efficiency and accuracy, and bring better user experience.
[0057] Referring to Figure 3 The embodiment of the application discloses a kind of based on large model's object storage bucket policy configuration device, comprising:
[0058] Configuration analysis module 11, for the key and bucket name of user input are verified, after verification succeeds, the bucket policy information and user information corresponding to the object storage of the user are acquired, the current configuration of the bucket of the object storage is analyzed based on the bucket policy information and user information by large model, to obtain analysis information;
[0059] Configuration demand acquisition module 12, for the analysis information is sent to the user, so that the user determines configuration demand based on the analysis information, and the configuration demand is obtained by interactive dialogue with the user;
[0060] File and configuration sending module 13, for generating bucket policy configuration by the bucket policy rule corresponding to the object storage and the configuration demand, the bucket policy configuration is analyzed and verified, if verification succeeds, corresponding parsed configuration file and the bucket policy configuration are sent to the user;
[0061] Bucket policy configuration application module 14, for after the user determines that the bucket policy configuration meets target condition, the bucket policy configuration is applied to the bucket of the object storage.
[0062] It can be seen that the present application collects existing bucket policy information and user information of object storage through a large model calling object storage tool, forms a status summary and returns it to the user. Then through dialogue with the user, the user's requirements for the bucket policy are guided and understood, a bucket policy configuration is generated, and the user is explained in natural language, and after continuous communication and user confirmation, the user's object storage bucket can be configured. In this way, the user can conveniently and accurately configure the bucket policy, reducing the user operation complexity and the threshold for the user to use the object storage.
[0063] In some specific embodiments, the configuration requirement obtaining module 12 can specifically include:
[0064] The configuration requirement determining unit is configured to perform multi-round interactive dialogue with the user, perform semantic analysis on the text input by the user in each round of interactive dialogue, send the corresponding semantic analysis result to the user for verification, and determine the configuration requirement according to the corresponding verification result; the text and the configuration requirement are both natural languages.
[0065] In some specific embodiments, the file and configuration sending module 13 can specifically include:
[0066] The bucket policy configuration generating unit is configured to determine a policy template according to the configuration requirement, generate a bucket policy configuration in a Json format based on the policy template, the corresponding bucket policy rule of the object storage, and the configuration requirement.
[0067] In some specific embodiments, the file and configuration sending module 13 can specifically include:
[0068] The parsing and checking unit is configured to parse the bucket policy configuration to obtain content information of each policy item, and check the syntax and logic of the content information.
[0069] In some specific embodiments, the apparatus can further include:
[0070] The error report generating module is configured to generate a corresponding error report if the checking fails, and re-execute the operation of generating the bucket policy configuration based on the error report.
[0071] In some specific embodiments, the apparatus can further include:
[0072] The jump module is configured to jump back to the step of obtaining the configuration requirement by interacting with the user if the user determines that the bucket policy configuration does not meet the target condition.
[0073] Further, the present application also discloses an electronic device, Figure 4This is a structural diagram of an electronic device 20 according to an exemplary embodiment. The content in the diagram should not be considered as any limitation to the scope of application of the present application.
[0074] Figure 4 This is a schematic diagram of the structure of an electronic device 20 provided in an embodiment of the present application. The electronic device 20 may specifically include: at least one processor 21, at least one memory 22, a power supply 23, a communication interface 24, an input / output interface 25, and a communication bus 26. The memory 22 is used to store a computer program, which is loaded and executed by the processor 21 to implement the relevant steps of the large model-based object storage bucket policy configuration method disclosed in any of the aforementioned embodiments. Furthermore, the electronic device 20 in this embodiment may specifically be an electronic computer.
[0075] In this embodiment, the power supply 23 is used to provide operating voltage for each hardware device on the electronic device 20; the communication interface 24 can create a data transmission channel between the electronic device 20 and the external device. The communication protocol it follows is any communication protocol that can be applied to the technical solution of this application and is not specifically limited here; the input and output interface 25 is used to obtain external input data or output data to the outside world. Its specific interface type can be selected according to specific application needs and is not specifically limited here.
[0076] In addition, the memory 22 as a carrier for resource storage can be a read-only memory, random access memory, disk or optical disk, etc. The resources stored thereon can include an operating system 221, a computer program 222, etc., and the storage method can be temporary storage or permanent storage.
[0077] The operating system 221 is used to manage and control the hardware devices on the electronic device 20 and the computer program 222, and can be Windows Server, NetWare, Unix, Linux, etc. In addition to including a computer program capable of implementing the large model-based object storage bucket policy configuration method performed by the electronic device 20 as disclosed in any of the aforementioned embodiments, the computer program 222 may further include a computer program capable of performing other specific tasks.
[0078] Furthermore, this application discloses a computer-readable storage medium for storing a computer program. When executed by a processor, the computer program implements the aforementioned large-model-based object storage bucket policy configuration method. The specific steps of this method can be found in the corresponding content disclosed in the aforementioned embodiments and will not be further described here.
[0079] The various embodiments in this specification are described in a progressive manner, with each embodiment focusing on its differences from the other embodiments. Reference can be made to the descriptions of the identical or similar parts between the various embodiments. For the devices disclosed in the embodiments, since they correspond to the methods disclosed in the embodiments, the descriptions are relatively simple, and the relevant parts can be referred to the descriptions of the methods.
[0080] Professionals may further appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, computer software, or a combination of the two. In order to clearly illustrate the interchangeability of hardware and software, the above description has generally described the components and steps of each example according to their functions. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professionals and technicians may use different methods to implement the described functions for each specific application, but such implementation should not be considered beyond the scope of this application.
[0081] The steps of the methods or algorithms described in conjunction with the embodiments disclosed herein may be implemented directly using hardware, a software module executed by a processor, or a combination of the two. The software module may be placed in random access memory (RAM), internal memory, read-only memory (ROM), electrically programmable ROM, electrically erasable programmable ROM, registers, a hard disk, a removable disk, a CD-ROM, or any other form of storage medium known in the art.
[0082] Finally, it should be noted that, in this document, relational terms such as first and second, etc., are used only to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any actual relationship or order between these entities or operations. Moreover, the terms "comprises," "comprising," or any other variations thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or device comprising a series of elements includes not only those elements, but also other elements not explicitly listed, or elements inherent to such process, method, article, or device. In the absence of further limitations, an element defined by the phrase "comprising a ..." does not exclude the presence of additional identical elements in the process, method, article, or device comprising the element.
[0083] The above is a detailed introduction to the technical solution provided by the present application. Specific examples are used herein to illustrate the principles and implementation methods of the present application. The description of the above embodiments is only used to help understand the method of the present application and its core idea. At the same time, for those skilled in the art, according to the ideas of the present application, there may be changes in the specific implementation methods and application scope. In summary, the content of this specification should not be understood as a limitation on the present application.
Claims
1. A method for configuring an object storage bucket policy based on a large model, characterized in that: include: Verify the key and bucket name entered by the user. After successful verification, obtain the bucket policy information and user information corresponding to the user's object storage, and parse the current configuration of the object storage bucket based on the bucket policy information and user information through the big model to obtain parsed information; Sending the parsed information to the user so that the user can determine configuration requirements based on the parsed information, and obtaining the configuration requirements through an interactive dialogue with the user; Generate a bucket policy configuration based on the bucket policy rules corresponding to the object storage and the configuration requirements, parse and verify the bucket policy configuration, and if the verification is successful, send the corresponding parsed configuration file and the bucket policy configuration to the user; After the user determines that the bucket policy configuration meets the target conditions, the bucket policy configuration is applied to the bucket of the object storage.
2. The object storage bucket policy configuration method based on a large model according to claim 1, characterized in that: The bucket policy information includes bucket creation time, number of files in the bucket, access control list, cross-domain resource sharing settings, lifecycle management rules and custom domain name; the user information includes account name, account ID, sub-user list, and identity identification and access management permissions.
3. The object storage bucket policy configuration method based on a large model according to claim 1, characterized in that: The obtaining of the configuration requirement through interactive dialogue with the user includes: Conduct multiple rounds of interactive dialogues with the user, perform semantic analysis on the text input by the user in each round of interactive dialogue, send the corresponding semantic analysis results to the user for verification, and determine the configuration requirements based on the corresponding verification results; the text and the configuration requirements are both in natural language.
4. The object storage bucket policy configuration method based on a large model according to claim 1, characterized in that: Generating a bucket policy configuration according to the bucket policy rules corresponding to the object storage and the configuration requirements includes: Determine a policy template according to the configuration requirements, and generate a bucket policy configuration in Json format based on the policy template, the bucket policy rules corresponding to the object storage, and the configuration requirements.
5. The object storage bucket policy configuration method based on a large model according to claim 1, characterized in that: The parsing and verifying of the bucket policy configuration includes: The bucket policy configuration is parsed to obtain content information of each policy item, and the syntax and logic of the content information are verified.
6. The object storage bucket policy configuration method based on a large model according to claim 1, characterized in that: After parsing and verifying the bucket policy configuration, the method further includes: If the verification fails, a corresponding error report is generated, and the operation of generating the bucket policy configuration is re-executed based on the error report.
7. The object storage bucket policy configuration method based on a large model according to any one of claims 1 to 6, characterized in that: After sending the corresponding parsed configuration file and the bucket policy configuration to the user, the method further includes: If the user determines that the bucket policy configuration does not meet the target condition, the process jumps back to the step of obtaining the configuration requirement through an interactive dialogue with the user.
8. A device for configuring object storage bucket policies based on a large model, characterized in that: include: A configuration parsing module is used to verify the key and bucket name entered by the user. After successful verification, it obtains the bucket policy information and user information corresponding to the user's object storage, and parses the current configuration of the bucket of the object storage based on the bucket policy information and user information through the big model to obtain parsed information; a configuration requirement acquisition module, configured to send the parsed information to the user so that the user can determine the configuration requirement based on the parsed information, and to acquire the configuration requirement through an interactive dialogue with the user; A file and configuration sending module is used to generate a bucket policy configuration based on the bucket policy rules corresponding to the object storage and the configuration requirements, parse and verify the bucket policy configuration, and if the verification is successful, send the corresponding parsed configuration file and the bucket policy configuration to the user; The bucket policy configuration application module is used to apply the bucket policy configuration to the bucket of the object storage after the user determines that the bucket policy configuration meets the target conditions.
9. An electronic device, characterized in that: include: Memory, used to store computer programs; A processor, configured to execute the computer program to implement the large model-based object storage bucket policy configuration method according to any one of claims 1 to 7.
10. A computer-readable storage medium, characterized in that Used to store a computer program; wherein, when the computer program is executed by a processor, the object storage bucket policy configuration method based on a large model as described in any one of claims 1 to 7 is implemented.
Citation Information
Patent Citations
Object strategy operation method, device and equipment for distributed system
CN113687920A
Compliance across multiple cloud environments
US20230342179A1