检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
calc ak sk signature fail:signature expired When an API is called, the "Incorrect IAM authentication information: calc ak sk signature fail:signature expired" error is reported. It indicates that the AK or SK has expired.
APIG.0301 Error There are two possibilities to check: If error message "Incorrect IAM authentication information: decrypt token fail" and error code APIG.0301 are displayed, the token fails to decrypt.
When using a token for authentication, cache it to prevent frequently calling the IAM API used to obtain a user token. A token specifies temporary permissions in a computer system.
If the token is obtained by an IAM user (multiple IAM users can be created under an account), username is the name of the IAM user and is different from domainname. Project Name indicates the project name, for example, ap-southeast-3. . Parent topic: API
Figure 1 Relationships between SIS and other services Identity and Access Management (IAM) IAM provides user authentication and authorization for SIS.
User A user is created in IAM using an account, for access to cloud services. Each user has their own identity credentials (password and access keys). You can view the account ID and user ID on the My Credentials page of the console.
You can obtain the information on the My Credentials page. username: IAM username password: password of the IAM user domainname: account name project name: the name of the region where the service is deployed. In this example, the region is ap-southeast-3.
You are advised to create an IAM user and obtain the user token.
SIS does not support IAM fine-grained authorization. The IAM account has the same permissions as the main account. You can create IAM users for employees or applications. For details, see Creating an IAM User. Parent topic: Permissions
