检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
For example, to obtain an IAM token in the AP-Bangkok region, obtain the endpoint of IAM (iam.ap-southeast-2.myhwclouds.com) for this region and the resource-path (/v3/auth/tokens) in the URI of the API used to obtain a user token.
Custom Authentication Information Obtaining Class The IdentityGenerator class is used to obtain IAM authentication information (token, permanent AK/SK, and temporary AK/SK and securityToken) for accessing LakeFormation.
SDK Overview This document lists the SDK versions provided by Identity and Access Management (IAM) and the addresses for obtaining the latest SDK versions. SDK List Table 1 lists the SDKs supported by IAM.
If your account does not need individual IAM users, you may skip this topic. By default, new IAM users do not have any permissions assigned. You need to add a user to one or more groups, and assign policies or roles to these groups.
For details, see Obtaining Account, IAM User, and Project Information. scope specifies where a token takes effect. Its value can be project or domain.
On the API Credentials page, obtain the account name, account ID, IAM username, and IAM user ID, and obtain the project and its ID from the project list. Obtaining a Project ID by Calling an API You can obtain the project ID by calling the API to query project information.
On the API Credentials page, obtain the account name, account ID, IAM username, and IAM user ID, and obtain the project and its ID from the project list. Obtaining a Project ID by Calling an API You can obtain the project ID by calling the API to query project information.
Adjusting Repository Visibility Constraints You can adjust the openness of a repository only when you are a tenant or an IAM user with the te_admin role assigned by the tenant. For details, see Configuring Repo-Level Permissions.
Use fine-grained authorization to add iam:tokens:assume and required operation permissions to the agency.
Policies that contain actions supporting both IAM and enterprise projects can be assigned to user groups and take effect in both IAM and Enterprise Management. Policies that only contain actions supporting IAM projects can be assigned to user groups and only take effect for IAM.
For example, to obtain an IAM token in the CN-Hong Kong region, obtain the endpoint of IAM (iam.ap-southeast-1.myhuaweicloud.com) for this region and the resource-path (/v3/auth/tokens) in the URI of the API used to obtain a user token.
For example, to obtain an IAM token in the CN North-Beijing1 region, obtain the endpoint of IAM (iam.cn-north-1.myhuaweicloud.com) for this region and the resource-path (/v3/auth/tokens) in the URI of the API used to obtain a user token.
For more information about IAM, see What Is IAM? OA Service Permissions By default, new IAM users do not have any permissions assigned.
If you are an IAM user, log in by choosing IAM User on the login page. If the login fails, see Why Does IAM User Login Fail?.
The validity period of a token obtained from IAM is 24 hours. If you want to use a token for authentication, cache it to avoid frequently calling the IAM API.
X-Auth-Token Yes String IAM user token (no special permission requirements). Response Parameters Table 3 Parameters in the response body Parameter Type Description region Object Region information.
Configuring HTTPS Password Background As shown in the following figure, developer Sam uses a new IAM account to develop the Test_Repo repository of the Test_Project.
If your Huawei Cloud account does not require individual IAM users for permissions management, skip this section. With IAM, you can use your Huawei Cloud account to create IAM users, and grant permissions to the users to control their access to specific resources.
You have a cloud service agency whose delegated object is the IAM Identity Center service.
API calling through IAM authentication (token authentication): API callers obtain a token from the cloud service platform and add the token to their API requests.
