检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
For security purposes, create Identity and Access Management (IAM) users and grant them permissions for routine management. User An IAM user is created using an account to use cloud services. Each IAM user has its own identity credentials (password and access keys).
configurations: Using CAE Access Control to Minimize Permissions Planning Services Correctly Based on CAE Network Security Design to Prevent Network Attacks Enabling CTS to Record All CAE Access Operations Using CAE Access Control to Minimize Permissions New Identity and Access Management (IAM
Figure 6 Viewing an image Step 2: Create an Agency for Your Account Log in to IAM using an account with the permission to create agencies. Select a region in the upper part of the console.
If your Huawei Cloud account does not require individual IAM users for permissions management, you can skip this section. IAM is a free service. You only pay for the resources in your account. For more information about IAM, see IAM Service Overview.
Figure 1 IAM console Configure a custom policy. Policy Name: Enter cae-subuser. Policy Content: Select Deny. Select service: Select Cloud Application Engine. Select Action: Select cae:application:createConsole. Figure 2 Creating a custom policy Click OK.
For example, the endpoint of IAM in the AP-Singapore region is iam.ap-southeast-3.myhwcloud.com. resource-path: access path of an API for performing a specified operation. Obtain the value from the URI of an API.
Log in to Huawei Cloud as an IAM user.
The API for obtaining a project ID is GET https://{Endpoint}/v3/projects, where {Endpoint} indicates the IAM endpoint. You can obtain the IAM endpoint from Regions and Endpoints. For details about API authentication, see 3.2 Authentication.
Creating a User and Granting Permissions This section describes how to use Identity and Access Management (IAM) to implement fine-grained permissions control for your CAE resources. With IAM, you can: Create IAM users for employees from different departments of your enterprise.
