检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
To ensure account security, create Identity and Access Management (IAM) users and grant them permissions for routine management. User An IAM user is created by an account in IAM to use cloud services. Each IAM user has its own identity credentials (password and access keys).
Creating a User and Granting Permissions Use IAM to implement fine-grained permissions control over your ELB resources. With IAM, you can: Create IAM users for employees based on your enterprise's organizational structure.
Creating a User and Granting Permissions Use IAM to implement fine-grained permissions control over your ELB resources. With IAM, you can: Create IAM users for employees based on your enterprise's organizational structure.
IAM is a global service. You can create an IAM user using the endpoint of IAM in any region.
Listener Permission API Action IAM Project Enterprise Project Adds a listener POST /v2/{project_id}/elb/listeners elb:listeners:create √ √ Queries a listener GET /v2/{project_id}/elb/listeners/{listener_id} elb:listeners:get √ √ Queries listeners GET /v2/{project_id}/elb/listeners
API Version Permission API Action IAM Project Enterprise Project Queries the API version GET /versions elb:quotas:list √ x Parent topic: Supported Actions (V3)
Identity and Access Management Identity Authentication You can use Identity and Access Management (IAM) to control access to your ELB resources. IAM permissions define which actions on your cloud resources are allowed or denied.
IAM projects or enterprise projects: Type of projects in which policies can be used to grant permissions. A policy can be applied to IAM projects, enterprise projects, or both.
name "password": $ADMIN_PASS, //IAM user password.
The following is part of the response body for the API used to create an IAM user. { "user": { "id": "c131886aec...
Authenticating the Token Send POST https://IAM endpoint/v3/auth/tokens. Obtain the Identity and Access Management (IAM) endpoint and region name in the message body. See Regions and Endpoints.
Availability Zone Permission API Action IAM Project Enterprise Project Queries AZs GET /v3/{project_id}/elb/availability-zones elb:availability-zones:list √ √ Parent topic: Supported Actions (V3)
Quota Permission API Action IAM Project Enterprise Project Queries default resource quotas GET /v2/{project_id}/elb/quotas/defaults elb:quotas:list √ x Queries current resource quotas GET /v2/{project_id}/elb/quotas elb:quotas:list √ x Parent topic: Supported Actions (V2)
Quota Permission API Action IAM Project Enterprise Project Queries current resource quotas GET /v3/{project_id}/elb/quotas elb:quotas:list √ √ Queries quota usage GET /v3/{project_id}/elb/quotas/details elb:quotas:list √ √ Parent topic: Supported Actions (V3)
Whitelist Permission API Action IAM Project Enterprise Project Adds a whitelist POST /v2/{project_id}/elb/whitelists elb:whitelists:create √ √ Queries a whitelist GET /v2/{project_id}/elb/whitelists/{whitelist_id} elb:whitelists:get √ √ Queries whitelists GET /v2/{project_id}/elb/
Skip this section if your Huawei Cloud account does not require individual IAM users for permissions management. IAM is a free service. You only pay for the resources in your account. For more information about IAM, see the IAM Service Overview.
The validity period of a token obtained from IAM is 24 hours. If you want to use a token for authentication, cache it to avoid frequently calling the IAM API.
Forwarding Policy Permission API Action IAM Project Enterprise Project Adds a forwarding policy POST /v2/{project_id}/elb/l7policies elb:l7policies:create √ √ Queries a forwarding policy GET /v2/{project_id}/elb/l7policies/{l7policy_id} elb:l7policies:get √ √ Queries forwarding policies
Load Balancer Flavor Permission API Action IAM Project Enterprise Project Queries default resource quotas GET /v3/{project_id}/elb/flavors elb:flavors:list √ x Queries current resource quotas GET /v3/{project_id}/elb/flavors/{flavor_id} elb:flavors:get √ x Parent topic: Supported
Health Check Permission API Action IAM Project Enterprise Project Configures a health check POST /v2/{project_id}/elb/healthmonitors elb:healthmonitors:create √ √ Queries a health check GET /v2/{project_id}/elb/healthmonitors/{healthmonitor_id} elb:healthmonitors:get √ √ Queries health
