检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
With IAM, you can use your Huawei Cloud account to create IAM users, and assign permissions to the users to control their access to specific resources.
Synchronizing IAM Users to the Database Function This API is used to synchronize IAM users to the database. Call Method For details, see Calling APIs.
Otherwise, contact the IAM account administrator to grant your IAM account this permission.
IAM permissions: This problem occurs when a user has only an IAM account. In this case, permissions such as VPC and EVC/BMS permissions need to be assigned to the IAM account. Or, the user can use the master account to perform scaling out.
AccessKeyID and SecretAccessKey are the access key ID and secret access key corresponding to the IAM user specified by DbUser. Set DbUser to the IAM username. Note that the current version does not support hyphens (-) in the IAM username.
For details, see IAM Basic Information. After operation protection is enabled, when you perform a mission-critical operation, the system will protect the operation.
and ODBC Drivers to Connect to a GaussDB(DWS) Cluster Development Specifications JDBC Version Description Downloading the JDBC or ODBC Driver Using JDBC to Connect to a Cluster Configuring JDBC to Connect to a Cluster (Load Balancing Mode) Configuring JDBC to Connect to a Cluster (IAM
If your Huawei Cloud account does not need individual IAM users for permissions management, skip this section. IAM can be used free of charge. You pay only for the resources in your account. For more information about IAM, see Service Overview.
You can log in to the IAM management console, choose Permission Management > Permissions, and click the "DWS Agency Access" permission to view the complete dependency information.
With IAM, you can: With IAM, you can: Create IAM users for employees based on the organizational structure of your enterprise. Each IAM user has their own security credentials, providing access to GaussDB(DWS) resources.
In this way, IAM implements fine-grained permission management.
Currently, the GaussDB(DWS) cluster supports two login modes: custom (username + password) and IAM account. Custom login is the default login mode. With IAM account login, you create an IAM user in the database and use a token to log in.
IAM or enterprise projects: Type of projects for which an action will take effect. Policies that contain actions supporting both IAM and enterprise projects can be assigned to user groups and take effect in both IAM and Enterprise Management.
For example, to obtain the IAM token in the CN-Hong Kong region, obtain the endpoint of IAM (iam.ap-southeast-1.myhuaweicloud.com) for this region and the resource-path (/v3/auth/tokens) in the URI of the API used to obtain a user token.
Log in to the IAM console and create a custom policy.
You can use IAM to control cloud resource access and prevents misoperations on cloud resources. This section describes how to configure the read-only permission for an IAM user.
Related Services IAM GaussDB(DWS) uses Identity and Access Management (IAM) for authentication and authorization. Users who have the DWS Administrator permissions can fully utilize GaussDB(DWS).
For security purposes, create Identity and Access Management (IAM) users and grant them permissions for routine management. Users An IAM user is created using an account to use cloud services. Each IAM user has its own identity credentials (password and access keys).
Managing Database Permissions Synchronizing IAM Users to the Database Querying All Database Users and Roles Querying User Information Modifying User Information Modifying Database Object Permissions Querying Database Object Permissions Obtaining the Cluster O&M Account Status Perform
Authentication and Access Control Resource Access Control (IAM Permission Control) Separation of Database Access Permissions Permissions Management Using GRANT and REVOKE Row-Level Access Control Parent topic: Security
