检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
Custom Authentication Information Obtaining Class The IdentityGenerator class is used to obtain IAM authentication information (token, permanent AK/SK, and temporary AK/SK and securityToken) for accessing LakeFormation.
For example, to obtain an IAM token in the AP-Bangkok region, obtain the endpoint of IAM (iam.ap-southeast-2.myhwclouds.com) for this region and the resource-path (/v3/auth/tokens) in the URI of the API used to obtain a user token.
For details, see Obtaining Account, IAM User, and Project Information. scope specifies where a token takes effect. Its value can be project or domain.
SDK Overview This document lists the SDK versions provided by Identity and Access Management (IAM) and the addresses for obtaining the latest SDK versions. SDK List Table 1 lists the SDKs supported by IAM.
For example, to obtain an IAM token in the CN-Hong Kong region, obtain the endpoint of IAM (iam.ap-southeast-1.myhuaweicloud.com) for this region and the resource-path (/v3/auth/tokens) in the URI of the API used to obtain a user token.
For example, to obtain an IAM token in the CN North-Beijing1 region, obtain the endpoint of IAM (iam.cn-north-1.myhuaweicloud.com) for this region and the resource-path (/v3/auth/tokens) in the URI of the API used to obtain a user token.
Adjusting Repository Visibility Constraints You can adjust the openness of a repository only when you are a tenant or an IAM user with the te_admin role assigned by the tenant. For details, see Configuring Repo-Level Permissions.
If your account does not need individual IAM users, you may skip this topic. By default, new IAM users do not have any permissions assigned. You need to add a user to one or more groups, and assign policies or roles to these groups.
On the API Credentials page, obtain the account name, account ID, IAM username, and IAM user ID, and obtain the project and its ID from the project list. Obtaining a Project ID by Calling an API You can obtain the project ID by calling the API to query project information.
On the API Credentials page, obtain the account name, account ID, IAM username, and IAM user ID, and obtain the project and its ID from the project list. Obtaining a Project ID by Calling an API You can obtain the project ID by calling the API to query project information.
Use fine-grained authorization to add iam:tokens:assume and required operation permissions to the agency.
Policies that contain actions supporting both IAM and enterprise projects can be assigned to user groups and take effect in both IAM and Enterprise Management. Policies that only contain actions supporting IAM projects can be assigned to user groups and only take effect for IAM.
Click in the upper left corner of the page and choose Management & Governance > IAM Identity Center. In the navigation pane, choose Applications. Click the name of the application to which you want to map attributes.
X-Auth-Token Yes String IAM user token (no special permission requirements). Response Parameters Table 3 Parameters in the response body Parameter Type Description region Object Region information.
Configuring HTTPS Password Background As shown in the following figure, developer Sam uses a new IAM account to develop the Test_Repo repository of the Test_Project.
If you are an IAM user, log in by choosing IAM User on the login page. If the login fails, see Why Does IAM User Login Fail?.
The validity period of a token obtained from IAM is 24 hours. If you want to use a token for authentication, cache it to avoid frequently calling the IAM API.
If your Huawei Cloud account does not require individual IAM users for permissions management, skip this section. With IAM, you can use your Huawei Cloud account to create IAM users, and grant permissions to the users to control their access to specific resources.
API calling through IAM authentication (token authentication): API callers obtain a token from the cloud service platform and add the token to their API requests.
IAM or enterprise projects: Type of projects for which an action will take effect. Policies that contain actions supporting both IAM and enterprise projects can be assigned to user groups and take effect in both IAM and Enterprise Management.
