检测到您已登录华为云国际站账号,为了您更好的体验,建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
LakeFormation authenticates the IAM token in the HTTPS request delivered by the console to identify the delegating tenant (local tenant), agency, delegated tenant (ECS account), and delegated IAM user (built-in user of ECS). If the authentication fails, the request is rejected.
For example, if an IAM user wants to query ECSs using an API, the user must have been granted permissions that allow the ecs:servers:list action. Actions LakeFormation provides system-defined policies that can be directly used in IAM.