检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
The API for obtaining an IAM project ID is GET https://{Endpoint}/v3/projects, where {Endpoint} indicates the IAM endpoint. You can obtain the IAM endpoint from Regions and Endpoints. For details about API authentication, see Authentication.
The token can be obtained by calling the IAM API used to obtain a user token. The value of X-Subject-Token in the response header is the user token. Constraints: N/A Value range: A string of 1 to 100,000 characters.
For example, if you want to create an IAM user, use the endpoint of any region because IAM is a global service.
For security purposes, create IAM users and grant them permissions for routine management. User An identity and access management (IAM) user is created by an account to use cloud services. Each IAM user has its own identity credentials (password and access keys).
Obtaining a Project ID Obtaining a CodeArts Project ID Obtaining an IAM Project ID Parent topic: Appendix
The token can be obtained by calling the IAM API used to obtain a user token. The value of X-Subject-Token in the response header is the user token. Constraints: N/A Value range: A string of 1 to 100,000 characters.
IAM users created without being added to any groups do not have permissions. Administrators can assign permissions to these users on the IAM console. Then users can use cloud resources in the account based on the assigned permissions. Custom roles do not have preset permissions.
User roles are essentially IAM permissions. To authorize IAM permissions, an administrator needs to create IAM users, add them to user groups, and assign policies or roles to the user groups. Users in the user groups also obtain the corresponding permissions.
When using a token for authentication, cache it to prevent frequently calling the IAM API used to obtain a user token. Ensure that the token is valid when you use it. Using a token that will soon expire may cause API calling failures.
The token can be obtained by calling the IAM API used to obtain a user token. The value of X-Subject-Token in the response header is the user token. Constraints: N/A Value range: A string of 1 to 100,000 characters.
