双十一数据安全平台购买

import boto3
from botocore.exceptions import NoCredentialsError

# 初始化AWS客户端
s3 = boto3.client('s3')

# 创建一个加密的S3存储桶
def create_encrypted_bucket(bucket_name):
    try:
        s3.create_bucket(Bucket=bucket_name, CreateBucketConfiguration={'LocationConstraint': 'us-west-2'})
        s3.put_bucket_encryption(
            Bucket=bucket_name,
            ServerSideEncryptionConfiguration={
                'Rules': [
                    {
                        'ApplyServerSideEncryptionByDefault': {
                            'SSEAlgorithm': 'AES256'
                        }
                    },
                ]
            }
        )
        print(f"Bucket {bucket_name} created and encrypted successfully.")
    except NoCredentialsError:
        print("Credentials not available")

# 设置访问控制策略
def set_bucket_policy(bucket_name):
    bucket_policy = {
        "Version": "2012-10-17",
        "Statement": [
            {
                "Sid": "PublicReadGetObject",
                "Effect": "Allow",
                "Principal": "*",
                "Action": "s3:GetObject",
                "Resource": f"arn:aws:s3:::{bucket_name}/*"
            }
        ]
    }
    s3.put_bucket_policy(Bucket=bucket_name, Policy=json.dumps(bucket_policy))
    print(f"Bucket policy set for {bucket_name}.")

# 示例调用
create_encrypted_bucket('my-secure-bucket')
set_bucket_policy('my-secure-bucket')