检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
Creating a User and Granting GaussDB(for MySQL) Permissions This section describes how to use IAM for fine-grained permissions control over your GaussDB(for MySQL) resources. With IAM, you can: Create IAM users for employees based on your enterprise's organizational structure.
Making an API Request This section describes the structure of a REST API, and uses the IAM API for obtaining a user token as an example to describe how to call an API. The obtained token is used to authenticate the calling of other APIs.
IAM users can use GaussDB(for MySQL) resources only after their accounts and passwords are verified. For details, see Step 2: Create IAM Users and Log In.
IAM projects or enterprise projects: Type of projects in which policies can be used to grant permissions. A policy can be applied to IAM projects, enterprise projects, or both.
If your Huawei Cloud account does not require individual IAM users for permissions management, you can skip this section. IAM is free of charge. You pay only for the resources in your account. For more information about IAM, see IAM Service Overview.
IAM User An IAM user is created using an account to use cloud services. Each IAM user has its own identity credentials (password and access keys). API authentication requires information such as the account, username, and password.
Configuring only the minimum permissions for IAM users with different roles To better isolate and manage permissions, you are advised to configure an independent IAM administrator and grant them the permission to manage IAM policies.
It can be obtained by calling the IAM API used to obtain a user token. The value of X-Subject-Token in the response header is the token value. X-Language No String Request language type. The default value is en-us.
To configure TDE, you must have the iam:agencies:createServiceLinkedAgencyV5 permission. If you do not have this permission, create a custom policy. You need to enable Key Management Service (KMS) for your DB instance first.
It can be obtained by calling the IAM API used to obtain a user token. The value of X-Subject-Token in the response header is the token value. X-Language No String Request language type. The default value is en-us.
It can be obtained by calling the IAM API used to obtain a user token. The value of X-Subject-Token in the response header is the token value. X-Language No String Request language type. The default value is en-us.
To obtain this value, call the IAM API for obtaining a user token. The value of X-Subject-Token in the response header is the token value. X-Language No String Request language type. The default value is en-us.
It can be obtained by calling the IAM API used to obtain a user token. The value of X-Subject-Token in the response header is the token value. X-Language No String Request language type. The default value is en-us.
To obtain this value, call the IAM API for obtaining a user token. The value of X-Subject-Token in the response header is the token value. X-Language No String Request language type. The default value is en-us.
It can be obtained by calling the IAM API used to obtain a user token. The value of X-Subject-Token in the response header is the token value. X-Language No String Request language type. The default value is en-us.
To obtain this value, call the IAM API for obtaining a user token. The value of X-Subject-Token in the response header is the token value. X-Language No String Request language type. The default value is en-us.
To obtain this value, call the IAM API for obtaining a user token. The value of X-Subject-Token in the response header is the token value. X-Language No String Request language type. The default value is en-us.
It can be obtained by calling the IAM API used to obtain a user token. The value of X-Subject-Token in the response header is the token value. X-Language No String Request language type. The default value is en-us.
It can be obtained by calling the IAM API used to obtain a user token. The value of X-Subject-Token in the response header is the token value. X-Language No String Request language type. The default value is en-us.
It can be obtained by calling the IAM API used to obtain a user token. The value of X-Subject-Token in the response header is the token value. X-Language No String Request language type. The default value is en-us.
