检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
Creating a User and Assigning Live Permissions This section describes how to use IAM to implement refined permissions management for your Live resources. With IAM, you can: Create IAM users for employees from different departments of your enterprise.
Creating a User and Assigning Live Permissions This section describes how to use IAM to implement refined permissions management for your Live resources. With IAM, you can: Create IAM users for employees from different departments of your enterprise.
IAM is a global service. You can create an IAM user using the endpoint of IAM in any region.
IAM is a global service. You can create an IAM user using the endpoint of IAM in any region.
Live calls an IAM API to obtain a token and then use the token to authenticate the calling of Live APIs. For details about how to obtain a token, see Calling APIs. Parent topic: API Usage
With IAM, you can use your Huawei Cloud account to create IAM users, and assign permissions to the users to control their access to specific resources.
It is possible that: "error_msg":"Incorrect IAM authentication information: decrypt token fail","error_code":"APIG.0301"indicates that the token fails to be decrypted.
For security purposes, create IAM users and grant them permissions for routine management. IAM user An IAM user is created using an account to use cloud services. Each IAM user has its own identity credentials (password and access keys).
For security purposes, create IAM users and grant them permissions for routine management. IAM user An IAM user is created using an account to use cloud services. Each IAM user has its own identity credentials (password and access keys).
Access Control Live supports access control based on IAM permissions and hotlink protection. Table 1 Live access control Method Description Details IAM permissions IAM permissions define which actions on your cloud resources are allowed or denied.
The following is part of the response body for the API used to create an IAM user. { "user": { "id": "c131886aec...
The following is part of the response body for the API used to create an IAM user. { "user": { "id": "c131886aec...
name "password": $ADMIN_PASS, //IAM user password.
name "password": $ADMIN_PASS, //IAM user password.
The region where an IAM API is called must be the same as the region where a Live API is called.
If this message is displayed, you need to obtain a new token from the IAM service. For details, see Obtaining a User Token. Parent topic: API Usage
IAM users cannot grant authorizations. The codec is neither H.264 nor H.265. Live supports the two codecs only. Parent topic: Recording
The region where an IAM API is called must be the same as the region where a Media Live API is called.
When a new IAM user uses Media Live for the first time, they need to configure the permission to create a domain name. Notes Live may assign a default ingest domain name to you.
The token can be obtained by calling the IAM API used to obtain a user token. The value of X-Subject-Token in the response header is the user token. Authorization No String Authentication information. This parameter is mandatory for AK/SK authentication.
