统一身份认证服务 IAM-创建云服务自定义策略:请求示例

时间:2025-02-12 15:14:22

请求示例

创建一个名为“ IAM CloudServicePolicy”的自定义策略。策略表示仅允许以项目名称为“cn-north-1”开头的请求获取所有桶ACL的相关信息。

POST https://iam.myhuaweicloud.com/v3.0/OS-ROLE/roles
{    "role": {        "display_name": "IAMCloudServicePolicy",        "type": "AX",        "description": "IAMDescription",        "description_cn": "中文描述",        "policy": {            "Version": "1.1",            "Statement": [                {                    "Effect": "Allow",                    "Action": [                        "obs:bucket:GetBucketAcl"                    ],                    "Condition": {                        "StringStartWith": {                            "g:ProjectName": [                                "cn-north-1"                            ]                        }                    },                    "Resource": [                        "obs:*:*:bucket:*"                    ]                }            ]        }    }}
support.huaweicloud.com/api-iam/iam_02_0013.html