检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
IAM is recommended for granting permissions. For details, see IAM Custom Policies. The mapping between OBS regions and endpoints must comply with what is listed in Regions and Endpoints. An existing bucket cannot be changed to a PFS. PFSs do not support quota configuration.
Restrictions To list multipart uploads, you must be the bucket owner or have the required permission (obs:bucket:ListBucketMultipartUploads in IAM or ListBucketMultipartUploads in a bucket policy).
Restrictions To configure object metadata, you must be the bucket owner or have the required permission (obs:object:ModifyObjectMetaData in IAM or ModifyObjectMetaData in a bucket policy).
To configure a lifecycle rule for a bucket, you must be the bucket owner or have the required permission (obs:bucket:PutLifecycleConfiguration in IAM or PutLifecycleConfiguration in a bucket policy).
To configure static website hosting for a bucket, you must be the bucket owner or have the required permission (obs:bucket:PutBucketWebsite in IAM or PutBucketWebsite in a bucket policy).
Please check. 500 MPC.10001 IAM service exception. IAM service exception. Contact technical support. 500 MPC.10002 OBS service exception. OBS service exception. Contact technical support. 500 MPC.10003 SMN service exception. SMN service exception.
It is obtained by calling the IAM API. For details, see Obtaining an IAM User Token. Constraints Global tenant tokens are not supported. Use a region-level token whose scope is project. Range N/A. Default Value N/A.
Step 2: Enabling Basic Permissions Log in to the administrator account and grant the target IAM account basic permissions to use resource pools. Log in to the IAM console.
You can contact the administrator to use IAM to grant you this permission. For details, see Assigning Permissions to an IAM User. Click OK. Step 2: Add a CNAME Record Set Add a CNAME record set to map the user-defined domain name to the default domain name of the bucket.
Request Parameters Table 3 Request header parameters Parameter Mandatory Type Description X-Auth-Token Yes String IAM token, which is obtained by calling the IAM API for obtaining a user token (value of X-Subject-Token in the response header).
For details about how to obtain the project ID, see Project ID and Account ID. id Yes String Entity ID, which is a string Request Parameters Table 2 Request header parameters Parameter Mandatory Type Description X-Auth-Token Yes String IAM token, which is obtained by calling the IAM
Request Parameters Table 2 Request header parameters Parameter Mandatory Type Description X-Auth-Token Yes String IAM token, which is obtained by calling the IAM API for obtaining a user token (value of X-Subject-Token in the response header).
For details about how to obtain the project ID, see Project ID and Account ID. id Yes String Entity ID, which is a string Request Parameters Table 2 Request header parameters Parameter Mandatory Type Description X-Auth-Token Yes String IAM token, which is obtained by calling the IAM
After you agree to delegate permissions, CCE uses IAM to create an agency named cce_admin_trust. This agency is granted Tenant Administrator permissions for the resources of other cloud services (excluding IAM).
Figure 10 Configuring advanced settings Table 10 Advanced settings Parameter Description Modifiable After Cluster Creation IAM Authentication CCE clusters support IAM authentication. You can call IAM authenticated APIs to access CCE clusters.
Request Parameters Table 3 Request header parameters Parameter Mandatory Type Description X-Auth-Token No String User token The token can be obtained by calling the IAM API used to obtain a user token. The value of X-Subject-Token in the response header is the user token.
Default value: 10 Request Parameters Table 3 Request header parameters Parameter Mandatory Type Description X-Auth-Token No String User token The token can be obtained by calling the IAM API used to obtain a user token.
Request Parameters Table 3 Request header parameters Parameter Mandatory Type Description X-Auth-Token No String User token The token can be obtained by calling the IAM API used to obtain a user token. The value of X-Subject-Token in the response header is the user token.
It can be obtained by calling the IAM API used to obtain a user token. The value of X-Subject-Token in the response header is a token. Authorization No String Authentication information. This parameter is mandatory for AK/SK authentication.
It can be obtained by calling the IAM API used to obtain a user token. The value of X-Subject-Token in the response header is a token. Authorization No String Authentication information. This parameter is mandatory for AK/SK authentication.
