检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
For an IAM user, the format is iam::<account-id>:user:<user-name>. For an IAM delegated account, the format is sts::sts::<account-id>:assumed-agency:<agency-name>/<agency-session-name>.
Status Code Error Code Error Message Description Solution 400 CTS.0001 The IAM or OBS service is abnormal. The IAM or OBS service is abnormal. Contact technical support. 400 CTS.0003 The message body is empty or invalid. The message body is empty or invalid.
Table 8 NotificationUsers Parameter Type Description user_group String IAM user group. user_list Array of strings IAM user. Table 9 Filter Parameter Type Description condition String Relationship between conditions.
Creating an Agency Log in to the Identity and Access Management (IAM) console. In the navigation pane on the left, choose Agencies. On the Agencies page, click Create Agency. Set the agency information. For Agency Name, enter serverless_trust.
If you log in to the console as an Identity and Access Management (IAM) user, first contact your CTS administrator (account owner or a user in the admin user group) to obtain the CTS FullAccess permissions. For details, see Assigning Permissions to an IAM User.
When using a token for authentication, cache it to prevent frequently calling the IAM API used to obtain a user token. A token specifies temporary permissions in a computer system.
) IAM operations that can be recorded by CTS Tag Management Service (TMS) TMS operations that can be recorded by CTS Resource Access Manager (RAM) RMS operations that can be recorded by CTS Log Tank Service (LTS) LTS operations that can be recorded by CTS Config Config operations
Change History Released On Description 2024-09-10 This issue is the sixty-fourth official release, which incorporates the following change: Updated Cross-Tenant Transfer Authorization and added the examples of cross-tenant transfer authorization for each IAM identity. 2024-05-30 This
Bucket policies have different authorization objects based on tenant A's login modes, including: logging in as a common user, logging in as a federated tenant, switching as an agency, and logging in as an IAM Identity Center user.
If you log in to the console as an Identity and Access Management (IAM) user, first contact your CTS administrator (account owner or a user in the admin user group) to obtain the CTS FullAccess permissions. For details, see Assigning Permissions to an IAM User.
d0b9b7cba", "user_name": "IAMUserA", "domain": { "name": "IAMDomainB", "id": "7e0d78c85***d0b9b7cba" }, "name": "IAMUserA", "principal_is_root_user": "true", "id": "f36972ced***d619f1214", "principal_urn": "iam
Table 6 NotificationUsers Parameter Type Description user_group String IAM user group. user_list Array of strings IAM user. Table 7 Filter Parameter Type Description condition String Relationship between conditions.
Table 8 NotificationUsers Parameter Type Description user_group String IAM user group. user_list Array of strings IAM user. Table 9 Filter Parameter Type Description condition String Relationship between conditions.
